Mask the configured mark value to ensure it is in range

diff --git a/src/starter/confread.c b/src/starter/confread.c
index 671cfbab15b343e71b5a802a33095ef2c6ae5cbc..cd011afa48efc5dc575cccd5526ddaed8b260524 100644 (file)
--- a/src/starter/confread.c
+++ b/src/starter/confread.c
@@ -449,6 +449,8 @@ static bool handle_mark(char *value, mark_t *mark)
                        return FALSE;
                }
        }
+       /* apply the mask to ensure the value is in range */
+       mark->value &= mark->mask;
        return TRUE;
 }