[netfilter-cvslog] r3633 - trunk/iptables/extensions

laforge at netfilter.org laforge at netfilter.org
Tue Feb 1 16:14:25 CET 2005


Author: laforge at netfilter.org
Date: 2005-02-01 16:14:15 +0100 (Tue, 01 Feb 2005)
New Revision: 3633

Modified:
   trunk/iptables/extensions/libipt_SNAT.c
Log:
check for colons


Modified: trunk/iptables/extensions/libipt_SNAT.c
===================================================================
--- trunk/iptables/extensions/libipt_SNAT.c	2005-02-01 15:13:31 UTC (rev 3632)
+++ trunk/iptables/extensions/libipt_SNAT.c	2005-02-01 15:14:15 UTC (rev 3633)
@@ -65,7 +65,7 @@
 parse_to(char *arg, int portok, struct ipt_natinfo *info)
 {
 	struct ip_nat_range range;
-	char *colon, *dash;
+	char *colon, *dash, *error;
 	struct in_addr *ip;
 
 	memset(&range, 0, sizeof(range));
@@ -85,6 +85,11 @@
 			exit_error(PARAMETER_PROBLEM,
 				   "Port `%s' not valid\n", colon+1);
 
+		error = strchr(colon+1, ':');
+		if (error)
+			exit_error(PARAMETER_PROBLEM,
+				   "Invalid port:port syntax - use dash\n");
+
 		dash = strchr(colon, '-');
 		if (!dash) {
 			range.min.tcp.port




More information about the netfilter-cvslog mailing list