From 34caf0add23aab075c2bbe1a99927c081014cadd Mon Sep 17 00:00:00 2001 From: Arturo Borrero Gonzalez Date: Wed, 26 Jun 2013 13:37:00 +0200 Subject: bitwise: xml: mask and xor use same number of data registers The mask and xor must use the same number of data registers. Signed-off-by: Arturo Borrero Gonzalez Signed-off-by: Pablo Neira Ayuso --- src/expr/bitwise.c | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'src/expr/bitwise.c') diff --git a/src/expr/bitwise.c b/src/expr/bitwise.c index fa2fc5a..c8c4f40 100644 --- a/src/expr/bitwise.c +++ b/src/expr/bitwise.c @@ -298,6 +298,14 @@ nft_rule_expr_bitwise_xml_parse(struct nft_rule_expr *e, char *xml) bitwise->xor.len = data_regtmp.len; e->flags |= (1 << NFT_EXPR_BITWISE_XOR); + /* Additional validation: mask and xor must use the same number of + * data registers. + */ + if (bitwise->mask.len != bitwise->xor.len) { + mxmlDelete(tree); + return -1; + } + mxmlDelete(tree); return 0; #else -- cgit v1.2.3