Nicolas Bouliane: I was writing an nfsim .sim for the match tos, when I realized...

diff --git a/extensions/libipt_tos.c b/extensions/libipt_tos.c
index 6786911d7688c78bc0b46846aa779750f97fa90a..0d6a1d04c3afcbae0104473f0ad9c00b507b9a35 100644 (file)
--- a/extensions/libipt_tos.c
+++ b/extensions/libipt_tos.c
@@ -91,6 +91,11 @@ parse(int c, char **argv, int invert, unsigned int *flags,
 
        switch (c) {
        case '1':
+               /* Ensure that `--tos' haven't been used yet. */
+               if (*flags == 1)
+                       exit_error(PARAMETER_PROBLEM,
+                                       "tos match: only use --tos once!");
+
                check_inverse(optarg, &invert, &optind, 0);
                parse_tos(argv[optind-1], tosinfo);
                if (invert)