ts.get_subnet() returns TRUE if the selector actually is a subnet

diff --git a/src/libstrongswan/selectors/traffic_selector.c b/src/libstrongswan/selectors/traffic_selector.c
index b1bcf1b2d5dc20bed6fefadbb2c28b4450a85f64..8b862a8dcd566d5ac69627e3b1b0a6561b10d382 100644 (file)
--- a/src/libstrongswan/selectors/traffic_selector.c
+++ b/src/libstrongswan/selectors/traffic_selector.c
@@ -571,7 +571,7 @@ METHOD(traffic_selector_t, includes, bool,
        return FALSE;
 }
 
-METHOD(traffic_selector_t, to_subnet, void,
+METHOD(traffic_selector_t, to_subnet, bool,
        private_traffic_selector_t *this, host_t **net, u_int8_t *mask)
 {
        /* there is no way to do this cleanly, as the address range may
@@ -597,7 +597,7 @@ METHOD(traffic_selector_t, to_subnet, void,
                        break;
                default:
                        /* unreachable */
-                       return;
+                       return FALSE;
        }
 
        net_chunk.ptr = malloc(net_chunk.len);
@@ -616,6 +616,8 @@ METHOD(traffic_selector_t, to_subnet, void,
 
        *net = host_create_from_chunk(family, net_chunk, port);
        chunk_free(&net_chunk);
+
+       return this->netbits != NON_SUBNET_ADDRESS_RANGE;
 }
 
 METHOD(traffic_selector_t, clone_, traffic_selector_t*,

diff --git a/src/libstrongswan/selectors/traffic_selector.h b/src/libstrongswan/selectors/traffic_selector.h
index 257da3f244408f4e717279cc82c8b73dc00f70b5..67b5da5bf4974b35cca2eb11cdf405349b33d651 100644 (file)
--- a/src/libstrongswan/selectors/traffic_selector.h
+++ b/src/libstrongswan/selectors/traffic_selector.h
@@ -203,8 +203,9 @@ struct traffic_selector_t {
         *
         * @param net           converted subnet (has to be freed)
         * @param mask          converted net mask
+        * @return                      TRUE if traffic selector matches exactly to the subnet
         */
-       void (*to_subnet) (traffic_selector_t *this, host_t **net, u_int8_t *mask);
+       bool (*to_subnet) (traffic_selector_t *this, host_t **net, u_int8_t *mask);
 
        /**
         * Destroys the ts object