denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

connmark: Fix undefined shift if traffic selector is /0

Browse Source 
Same as the previous commit for consistency, but not an issue here as
only transport mode SAs are handled.

Fixes: b8973b2661 ("connmark: Add CONNMARK rules to select correct output SA based on conntrack")
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:36 +02:00
parent 117cf65030
commit c485080958
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/connmark/connmark_listener.c
+1 -1
View File
@@ -64,7 +64,7 @@ static bool ts2in(traffic_selector_t *ts,
{ {
memcpy(&addr->s_addr, net->get_address(net).ptr, 4); memcpy(&addr->s_addr, net->get_address(net).ptr, 4);
net->destroy(net); net->destroy(net);
mask->s_addr = htonl(0xffffffffU << (32 - bits)); mask->s_addr = bits ? htonl(0xffffffffU << (32 - bits)) : 0;
return TRUE; return TRUE;
} }
return FALSE; return FALSE;