diff options
| author |   Andrew Yourtchenko <ayourtch@gmail.com> | 2025-03-26 16:52:25 +0100 |
|---|---|---|
| committer | Andrew Yourtchenko <ayourtch@gmail.com> | 2025-03-27 14:50:58 +0000 |
| commit | b3a21b9b0e0808a850851994ab42f1bd83928c3f (patch) | |
| tree | d2a3189c5d65d20ac1ed845b52bce0505557af83 /src | |
| parent | cfa0953251cbab435307baf3dcd249fd95afaf1f (diff) | |
acl: fix an off-by-one error in fa_acl_match_ip6_addr which does masked IPv6 comparisonstable/2410
The comparison code for the bit remainder (non-zero part of prefix length modulo 8)
was incorrectly looking one byte further than it should.
Type: fix
Change-Id: Idd27d218e77eff5f368f2ba0a5cefb86ecf605f5
Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
(cherry picked from commit 7e295a42f0fd91a266a063b60935f7c8c3f9919e)
Diffstat (limited to 'src')
| -rw-r--r-- | src/plugins/acl/public_inlines.h | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/plugins/acl/public_inlines.h b/src/plugins/acl/public_inlines.h index eb9f0de920f..80edfd674d3 100644 --- a/src/plugins/acl/public_inlines.h +++ b/src/plugins/acl/public_inlines.h @@ -268,8 +268,8 @@ fa_acl_match_ip6_addr (ip6_address_t * addr1, ip6_address_t * addr2, } if (prefixlen % 8) { - u8 b1 = *((u8 *) addr1 + 1 + prefixlen / 8); - u8 b2 = *((u8 *) addr2 + 1 + prefixlen / 8); + u8 b1 = *((u8 *) addr1 + prefixlen / 8); + u8 b2 = *((u8 *) addr2 + prefixlen / 8); u8 mask0 = (0xff - ((1 << (8 - (prefixlen % 8))) - 1)); return (b1 & mask0) == b2; } |