diff options
Diffstat (limited to 'src/expr/exthdr.c')
-rw-r--r-- | src/expr/exthdr.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/expr/exthdr.c b/src/expr/exthdr.c index 8af6a63..7e16878 100644 --- a/src/expr/exthdr.c +++ b/src/expr/exthdr.c @@ -205,6 +205,11 @@ nft_rule_expr_exthdr_xml_parse(struct nft_rule_expr *e, char *xml) return -1; } + if (tmp > NFT_REG_MAX) { + mxmlDelete(tree); + return -1; + } + exthdr->dreg = tmp; e->flags |= (1 << NFT_EXPR_EXTHDR_DREG); } |