Fix bug: ROAs ASN wasn't validated against the allowed advertising

diff --git a/src/object/roa.c b/src/object/roa.c
index e971f5fb8998f24095f5973b79b77a71f47efaaa..566961ef3ceb8943c34545aec7fee318a2d649d8 100644 (file)
--- a/src/object/roa.c
+++ b/src/object/roa.c
@@ -66,6 +66,12 @@ ____handle_roa_v4(struct resources *parent, unsigned long asn,
                goto end_error;
        }
 
+       if (!resources_contains_asn(parent, asn)) {
+               error = pr_err("ROA is not allowed to advertise ASN %lu.",
+                   asn);
+               goto end_error;
+       }
+
        pr_debug_rm("}");
        return vhandler_handle_roa_v4(asn, &prefix, max_length);
 end_error:
@@ -120,6 +126,12 @@ ____handle_roa_v6(struct resources *parent, unsigned long asn,
                goto end_error;
        }
 
+       if (!resources_contains_asn(parent, asn)) {
+               error = pr_err("ROA is not allowed to advertise ASN %lu.",
+                   asn);
+               goto end_error;
+       }
+
        pr_debug_rm("}");
        return vhandler_handle_roa_v6(asn, &prefix, max_length);
 end_error: