holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Correct reference accounting when long port lists are split

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-07-23 07:31:58 -07:00
parent 3d616980a6
commit 028fc20741
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Shorewall/Perl/Shorewall/Chains.pm
View File

@ -266,6 +266,7 @@ our $filter_table;
my $comment;
my @comments;
my $export;
my $splitcount;
#
# Target Types
@ -951,12 +952,14 @@ sub handle_port_list( $$$$$$ ) {
handle_port_list( $chainref, $newrule, 0, $1, $2, $3 );
} else {
push_rule ( $chainref, $newrule );
$splitcount++;
}
}
} elsif ( $dport && $rule =~ /^(.* --sports\s+)([^ ]+)(.*)$/ ) {
handle_port_list( $chainref, $rule, 0, $1, $2, $3 );
} else {
push_rule ( $chainref, $rule );
$splitcount++;
}
}
@ -966,7 +969,7 @@ sub handle_port_list( $$$$$$ ) {
sub handle_icmptype_list( $$$$ ) {
my ($chainref, $first, $types, $rest) = @_;
my @ports = split ',', $types;
push_rule ( $chainref, join ( '', $first, shift @ports, $rest ) ) while @ports;
push_rule ( $chainref, join ( '', $first, shift @ports, $rest ) ), $splitcount++ while @ports;
}
#
@ -1010,9 +1013,11 @@ sub add_rule($$;$) {
handle_icmptype_list( $chainref, $first, $types, $rest );
} else {
push_rule( $chainref, $rule );
$splitcount++;
}
} else {
push_rule ( $chainref, $rule );
$splitcount++;
}
} else {
push_rule( $chainref, $rule );
@ -4523,6 +4528,10 @@ sub expand_rule( $$$$$$$$$$;$ )
push @ends, $end;
}
#
# Clear Split Count
#
$splitcount = 0;
#
# Trim disposition
#
$disposition =~ s/\s.*//;
@ -5021,9 +5030,12 @@ sub expand_rule( $$$$$$$$$$;$ )
my $targetref = $chain_table{$table}{$target};
if ( $targetref ) {
$targetref->{referenced} = 1;
for ( my $i = 0; $i < $splitcount; $i++ ) {
add_reference $fromref, $targetref;
}
}
}
while ( @ends ) {
decr_cmd_level $chainref;