Limit IPv6 mask bits to 128

diff --git a/src/common/address.c b/src/common/address.c
index 627764153b1fed49392dd95fc49a233fbd5e56ac..69a80986ed32ede5e59c652824bb2ab55790b324 100644 (file)
--- a/src/common/address.c
+++ b/src/common/address.c
@@ -1039,6 +1039,8 @@ tor_addr_compare_masked(const tor_addr_t *addr1, const tor_addr_t *addr2,
         return r;
       }
       case AF_INET6: {
+        if (mbits > 128)
+          mbits = 128;
         const uint8_t *a1 = tor_addr_to_in6_addr8(addr1);
         const uint8_t *a2 = tor_addr_to_in6_addr8(addr2);
         const int bytes = mbits >> 3;