diff options
| author |   Sergey Popovich <popovich_sergei@mail.ua> | 2015-05-02 19:28:11 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2015-05-13 13:25:47 +0200 |
| commit | cabfd139aa9863ebafe0bbba3f203d0c4e43e2cf (patch) | |
| tree | b29fb123f91ab8f53b49abe0c11df94fceb7a585 /net/netfilter/ipset/ip_set_hash_ipportnet.c | |
| parent | netfilter: ipset: Check IPSET_ATTR_PORT only once (diff) | |
| download | linux-dev-cabfd139aa9863ebafe0bbba3f203d0c4e43e2cf.tar.xz linux-dev-cabfd139aa9863ebafe0bbba3f203d0c4e43e2cf.zip | |
netfilter: ipset: Use HOST_MASK literal to represent host address CIDR len
Signed-off-by: Sergey Popovich <popovich_sergei@mail.ua>
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/ipset/ip_set_hash_ipportnet.c')
| -rw-r--r-- | net/netfilter/ipset/ip_set_hash_ipportnet.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/ipset/ip_set_hash_ipportnet.c b/net/netfilter/ipset/ip_set_hash_ipportnet.c index 2c39cae0df29..4ae9804386ad 100644 --- a/net/netfilter/ipset/ip_set_hash_ipportnet.c +++ b/net/netfilter/ipset/ip_set_hash_ipportnet.c @@ -248,7 +248,7 @@ hash_ipportnet4_uadt(struct ip_set *set, struct nlattr *tb[], } else if (tb[IPSET_ATTR_CIDR]) { cidr = nla_get_u8(tb[IPSET_ATTR_CIDR]); - if (!cidr || cidr > 32) + if (!cidr || cidr > HOST_MASK) return -IPSET_ERR_INVALID_CIDR; ip_set_mask_from_to(ip, ip_to, cidr); } |