diff options
Diffstat (limited to 'extensions/libip6t_policy.c')
| -rw-r--r-- | extensions/libip6t_policy.c | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/extensions/libip6t_policy.c b/extensions/libip6t_policy.c index 0016da29..5106c28e 100644 --- a/extensions/libip6t_policy.c +++ b/extensions/libip6t_policy.c @@ -156,7 +156,7 @@ static int policy_parse(int c, char **argv, int invert, unsigned int *flags, struct ip6t_policy_info *info = (void *)(*match)->data; struct ip6t_policy_elem *e = &info->pol[info->len]; struct in6_addr *addr = NULL, mask; - unsigned int naddr = 0; + unsigned int naddr = 0, num; int mode; xtables_check_inverse(optarg, &invert, &optind, 0); @@ -197,7 +197,9 @@ static int policy_parse(int c, char **argv, int invert, unsigned int *flags, e->match.reqid = 1; e->invert.reqid = invert; - e->reqid = strtoul(argv[optind-1], NULL, 10); + if (!xtables_strtoui(optarg, NULL, &num, 0, UINT32_MAX)) + xtables_param_act(XTF_BAD_VALUE, "policy", "--reqid", optarg); + e->reqid = num; break; case '5': if (e->match.spi) @@ -206,7 +208,9 @@ static int policy_parse(int c, char **argv, int invert, unsigned int *flags, e->match.spi = 1; e->invert.spi = invert; - e->spi = strtoul(argv[optind-1], NULL, 0x10); + if (!xtables_strtoui(optarg, NULL, &num, 0, UINT32_MAX)) + xtables_param_act(XTF_BAD_VALUE, "policy", "--spi", optarg); + e->spi = num; break; case '6': if (e->match.saddr) |