tree 4461527f6a948fd22f6b130623b4b5b9d076f657
parent f70e1d675ae70f607e28ea07d8e024ccf283374a
author Phil Oester <kernel@linuxace.com> 1380211618 -0700
committer Pablo Neira Ayuso <pablo@netfilter.org> 1380292131 +0200

libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks

As pointed out by Peter Hoelsken, rules created with non-standard
masks such as 0.255.0.0, 0.0.255.0, etc. are displayed when output
with iptables -L in CIDR notation as -1.  This is because the cidr
variable in xtables_ipmask_to_numeric is unsigned, and the return
value of -1 from xtables_ipmask_to_cidr is therefore converted to
UINT_MAX. Add a cast to workaround the issue.

This closes netfilter bugzilla #854.

Signed-off-by: Phil Oester <kernel@linuxace.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>