diff options
author | Florian Westphal <fw@strlen.de> | 2023-12-14 09:39:13 +0100 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2023-12-14 13:34:11 +0100 |
commit | 060ed8655d64874a92e6fba2ba9452b2aa94849e (patch) | |
tree | 2031b4dcf6481040352c3b85e27b59a76c5f0827 /src | |
parent | 7008b1200fb4988b7cd7ee1c5399cae071688d50 (diff) |
evaluate: fix gmp assertion with too-large reject code
Before:
nft: gmputil.c:77: mpz_get_uint8: Assertion `cnt <= 1' failed.
After: Error: reject code must be integer in range 0-255
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'src')
-rw-r--r-- | src/evaluate.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/evaluate.c b/src/evaluate.c index 8173d153..0e0e0c00 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -3590,6 +3590,13 @@ static int stmt_evaluate_reject_icmp(struct eval_ctx *ctx, struct stmt *stmt) erec_queue(erec, ctx->msgs); return -1; } + + if (mpz_cmp_ui(code->value, UINT8_MAX) > 0) { + expr_free(code); + return expr_error(ctx->msgs, stmt->reject.expr, + "reject code must be integer in range 0-255"); + } + stmt->reject.icmp_code = mpz_get_uint8(code->value); expr_free(code); |