Validate netmask in traffic_selector_create_from_subnet

Fixes #216.

diff --git a/src/libstrongswan/selectors/traffic_selector.c b/src/libstrongswan/selectors/traffic_selector.c
index bc814eadd70ba4a2f6ca410aa29f257d6c33675a..38d4b2d068d5e21783fe9dec501eb764d20bb305 100644 (file)
--- a/src/libstrongswan/selectors/traffic_selector.c
+++ b/src/libstrongswan/selectors/traffic_selector.c
@@ -757,6 +757,7 @@ traffic_selector_t *traffic_selector_create_from_subnet(host_t *net,
        }
        from = net->get_address(net);
        memcpy(this->from, from.ptr, from.len);
+       netbits = min(netbits, this->type == TS_IPV4_ADDR_RANGE ? 32 : 128);
        calc_range(this, netbits);
        if (port)
        {