From: Harald Welte <laforge@gnumonks.org>
Date: Tue, 1 Feb 2005 15:14:15 +0000 (+0000)
Subject: check for colons
X-Git-Tag: v1.3.0-rc1~8
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=de5ba5db3fd28dbb4cf3f3ec23b888ce0e1e1e4d;p=thirdparty%2Fiptables.git

check for colons
---

diff --git a/extensions/libipt_SNAT.c b/extensions/libipt_SNAT.c
index aca4a813..f10d0418 100644
--- a/extensions/libipt_SNAT.c
+++ b/extensions/libipt_SNAT.c
@@ -65,7 +65,7 @@ static struct ipt_entry_target *
 parse_to(char *arg, int portok, struct ipt_natinfo *info)
 {
 	struct ip_nat_range range;
-	char *colon, *dash;
+	char *colon, *dash, *error;
 	struct in_addr *ip;
 
 	memset(&range, 0, sizeof(range));
@@ -85,6 +85,11 @@ parse_to(char *arg, int portok, struct ipt_natinfo *info)
 			exit_error(PARAMETER_PROBLEM,
 				   "Port `%s' not valid\n", colon+1);
 
+		error = strchr(colon+1, ':');
+		if (error)
+			exit_error(PARAMETER_PROBLEM,
+				   "Invalid port:port syntax - use dash\n");
+
 		dash = strchr(colon, '-');
 		if (!dash) {
 			range.min.tcp.port