general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership

Fixes: #11235
Cc: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

diff --git a/config/cfgroot/general-functions.pl b/config/cfgroot/general-functions.pl
index 550afcf827b4b5a50c49e99a15593a8c2de6f619..c7df464898e6a68b7a674d4baeddd34ac0b56b64 100644 (file)
--- a/config/cfgroot/general-functions.pl
+++ b/config/cfgroot/general-functions.pl
@@ -601,7 +601,7 @@ sub checksubnets
                foreach my $key (keys %ipsecconf){
                        if ($ipsecconf{$key}[11] ne '' && $ipsecconf{$key}[36] eq ""){
                                foreach my $ipsecsubitem (split(/\|/, $ipsecconf{$key}[11])) {
-                                       my ($ipsecip,$ipsecsub) = split (/\//, $ipsecconf{$key}[11]);
+                                       my ($ipsecip,$ipsecsub) = split (/\//, $ipsecsubitem);
                                        $ipsecsub=&iporsubtodec($ipsecsub);
                                        if($ipsecconf{$key}[1] ne $ccdname){
                                                if ( &IpInSubnet ($ip,$ipsecip,$ipsecsub) ){