aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
diff options
context:
space:
mode:
authorTobias Brunner <tobias@strongswan.org>2012-08-13 12:57:41 +0200
committerTobias Brunner <tobias@strongswan.org>2012-08-13 13:46:19 +0200
commit305d98b7806aadfecf5d4ab08e66d212b68f9af1 (patch)
tree7588f759ae762e9c7165981885574e3c276be3e6 /src/libstrongswan
parent36a3981d475513ad018abbc70617ea4534ffd7e4 (diff)
downloadstrongswan-305d98b7806aadfecf5d4ab08e66d212b68f9af1.tar.bz2
strongswan-305d98b7806aadfecf5d4ab08e66d212b68f9af1.tar.xz
Validate netmask in traffic_selector_create_from_subnet
Fixes #216.
Diffstat (limited to 'src/libstrongswan')
-rw-r--r--src/libstrongswan/selectors/traffic_selector.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/libstrongswan/selectors/traffic_selector.c b/src/libstrongswan/selectors/traffic_selector.c
index bc814eadd..38d4b2d06 100644
--- a/src/libstrongswan/selectors/traffic_selector.c
+++ b/src/libstrongswan/selectors/traffic_selector.c
@@ -757,6 +757,7 @@ traffic_selector_t *traffic_selector_create_from_subnet(host_t *net,
}
from = net->get_address(net);
memcpy(this->from, from.ptr, from.len);
+ netbits = min(netbits, this->type == TS_IPV4_ADDR_RANGE ? 32 : 128);
calc_range(this, netbits);
if (port)
{