From 1695f5dd5aef56cd9541af4b6336b29c7552435c Mon Sep 17 00:00:00 2001 From: "/C=EU/ST=EU/CN=Patrick McHardy/emailAddress=kaber@trash.net" Date: Tue, 3 Jul 2007 12:52:55 +0000 Subject: [PATCH]: libipt_statistic: add a few missing validity checks Signed-off-by: Nicolas Bouliane --- extensions/libipt_statistic.c | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'extensions/libipt_statistic.c') diff --git a/extensions/libipt_statistic.c b/extensions/libipt_statistic.c index 4ed1813..f8aad2a 100644 --- a/extensions/libipt_statistic.c +++ b/extensions/libipt_statistic.c @@ -113,6 +113,15 @@ final_check(unsigned int flags) if (flags & 0x8 && info->mode != XT_STATISTIC_MODE_NTH) exit_error(PARAMETER_PROBLEM, "--packet can only be used in nth mode"); + if ((flags & 0x8) && !(flags & 0x4)) + exit_error(PARAMETER_PROBLEM, + "--packet can only be used with --every"); + /* at this point, info->u.nth.every have been decreased. */ + if (!(info->u.nth.packet >= 0 && info->u.nth.packet <= info->u.nth.every)) + exit_error(PARAMETER_PROBLEM, + "the --packet p must be 0 <= p <= n-1"); + + info->u.nth.count = info->u.nth.every - info->u.nth.packet; } -- cgit v1.2.3