From de4e0898b5ce73f36a7efb5e1f878cc5577bd5ac Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sun, 6 Jan 2013 17:23:14 -0800 Subject: [PATCH] Catch protocol lists in contexts that don't allow them. Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/IPAddrs.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/Shorewall/Perl/Shorewall/IPAddrs.pm b/Shorewall/Perl/Shorewall/IPAddrs.pm index 445152834..ece7fc1f0 100644 --- a/Shorewall/Perl/Shorewall/IPAddrs.pm +++ b/Shorewall/Perl/Shorewall/IPAddrs.pm @@ -324,6 +324,7 @@ sub resolve_proto( $ ) { $number = numeric_value ( $proto ); defined $number && $number <= 255 ? $number : undef; } else { + fatal_error "A protocol list ($proto) is not allowed in this context" if $proto =~ /,/; # # Allow 'icmp' as a synonym for 'ipv6-icmp' in IPv6 compilations #