From 58ef8e0ec3daf5acee4b48a1d3772d0c3f2b2c4d Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sun, 31 Mar 2013 07:07:21 -0700
Subject: [PATCH] Correct bounds check in do_dscp()

- "< 0x2f" s/b "< 0x3f"

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/Shorewall/Chains.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index 0fc52d99f..959e1e224 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -5056,7 +5056,7 @@ sub do_dscp( $ ) {
 
     $value = $dscpmap{$dscp} unless defined $value;
 
-    fatal_error( "Invalid DSCP ($dscp)" ) unless defined $value && $value < 0x2f && ! ( $value & 1 );
+    fatal_error( "Invalid DSCP ($dscp)" ) unless defined $value && $value < 0x3f && ! ( $value & 1 );
 
     "-m dscp ${invert}--dscp $value ";
 }