From: Peter Müller <peter.mueller@ipfire.org>
Date: Thu, 22 Apr 2021 16:15:22 +0000 (+0200)
Subject: general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=db4e10a6ecdb59a6f19249873ba5d50b22db6a68;p=people%2Fstevee%2Fipfire-2.x.git

general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership

Fixes: #11235

Cc: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
---

diff --git a/config/cfgroot/general-functions.pl b/config/cfgroot/general-functions.pl
index 550afcf827..c7df464898 100644
--- a/config/cfgroot/general-functions.pl
+++ b/config/cfgroot/general-functions.pl
@@ -601,7 +601,7 @@ sub checksubnets
 		foreach my $key (keys %ipsecconf){
 			if ($ipsecconf{$key}[11] ne '' && $ipsecconf{$key}[36] eq ""){
 				foreach my $ipsecsubitem (split(/\|/, $ipsecconf{$key}[11])) {
-					my ($ipsecip,$ipsecsub) = split (/\//, $ipsecconf{$key}[11]);
+					my ($ipsecip,$ipsecsub) = split (/\//, $ipsecsubitem);
 					$ipsecsub=&iporsubtodec($ipsecsub);
 					if($ipsecconf{$key}[1] ne $ccdname){
 						if ( &IpInSubnet ($ip,$ipsecip,$ipsecsub) ){