extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-23 19:21:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix mark validation

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3871 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-05-06 15:05:59 +00:00
parent af2ff337b7
commit f854202304
1 changed files with 34 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
Shorewall/compiler
View File

@ -1103,17 +1103,25 @@ __EOF__
# #
verify_mark() # $1 = value to test verify_mark() # $1 = value to test
{ {
verify_mark1() verify_mark2()
{ {
case $1 in
0*)
[ $(($1)) -lt 256 ] && return 0 [ $(($1)) -lt 256 ] && return 0
[ -n "$HIGH_ROUTE_MARKS" ] || return 1 [ -n "$HIGH_ROUTE_MARKS" ] || return 1
[ $(($1)) -gt 65535 ] && return 1 [ $(($1)) -gt 65535 ] && return 1
return $(($1 & 0XFF)) return $(($1 & 0xFF))
} ;;
[1-9]*)
verify_mark2() [ $1 -lt 256 ] && return 0
{ [ -n "$HIGH_ROUTE_MARKS" ] || return 1
verify_mark1 $1 2> /dev/null [ $1 -gt 65535 ] && return 1
return $(($1 & 0xFF))
;;
*)
return 2
;;
esac
} }
verify_mark2 $1 || fatal_error "Invalid Mark or Mask value: $1" verify_mark2 $1 || fatal_error "Invalid Mark or Mask value: $1"
@ -3228,6 +3236,19 @@ process_tc_rule()
did_connmark=Yes did_connmark=Yes
} }
validate_mark()
{
case $1 in
*/*)
verify_mark ${1%/*}
verify_mark ${1#*/}
;;
*)
verify_mark $1
;;
esac
}
add_a_tc_rule() { add_a_tc_rule() {
r= r=
@ -3408,8 +3429,8 @@ process_tc_rule()
;; ;;
*) *)
if [ "$chain" != tcpost ]; then if [ "$chain" != tcpost ]; then
verify_mark $mark validate_mark $mark
if [ $(($mark)) -gt 255 ]; then if [ $((${mark%/*})) -gt 255 ]; then
case $chain in case $chain in
tcpre|tcout) tcpre|tcout)
target="MARK --or-mark" target="MARK --or-mark"
@ -3418,7 +3439,7 @@ process_tc_rule()
fatal_error "Invalid mark value ($mark) in rule \"$rule\"" fatal_error "Invalid mark value ($mark) in rule \"$rule\""
;; ;;
esac esac
elif [ $(($mark)) -ne 0 -a -n "$HIGH_ROUTE_MARKS" -a $chain = tcpre ]; then elif [ $((${mark%/*})) -ne 0 -a -n "$HIGH_ROUTE_MARKS" -a $chain = tcpre ]; then
fatal_error "Marks < 256 may not be set in the PREROUTING chain when HIGH_ROUTE_MARKS=Yes" fatal_error "Marks < 256 may not be set in the PREROUTING chain when HIGH_ROUTE_MARKS=Yes"
fi fi
fi fi