X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=extensions%2Flibip6t_esp.c;fp=extensions%2Flibip6t_esp.c;h=886e09b335cbf24a20d361544e86466404c2f504;hb=a7620a02aaaddfaf83581aade872df16b8724c62;hp=29e865d40b3cd5d20dac76e0fa68df189f3e137c;hpb=34d283f916eeef73728a99668e40754f3961f580;p=iptables.git

diff --git a/extensions/libip6t_esp.c b/extensions/libip6t_esp.c
index 29e865d..886e09b 100644
--- a/extensions/libip6t_esp.c
+++ b/extensions/libip6t_esp.c
@@ -61,6 +61,9 @@ parse_esp_spis(const char *spistring, u_int32_t *spis)
 
 		spis[0] = buffer[0] ? parse_esp_spi(buffer) : 0;
 		spis[1] = cp[0] ? parse_esp_spi(cp) : 0xFFFFFFFF;
+		if (spis[0] > spis[1])
+			exit_error(PARAMETER_PROBLEM,
+				   "Invalid ESP spi range: %s", spistring);
 	}
 	free(buffer);
 }