From ab5ef410bd3bbdc83e4fd816cde2cea31965625b Mon Sep 17 00:00:00 2001
From: jim-p <jimp@netgate.com>
Date: Mon, 25 Nov 2019 10:06:53 -0500
Subject: [PATCH] Enforce limiter delay 0<=x<=10000. Fixes #9921

(cherry picked from commit 8afa74bb099d75962a5efb8a603981c0249f91a0)
---
 src/etc/inc/shaper.inc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/etc/inc/shaper.inc b/src/etc/inc/shaper.inc
index 6b6ab3c59b..c5c8e9b664 100644
--- a/src/etc/inc/shaper.inc
+++ b/src/etc/inc/shaper.inc
@@ -3841,6 +3841,10 @@ class dnpipe_class extends dummynet_class {
 		if ($data['delay'] && (!is_numeric($data['delay']))) {
 			$input_errors[] = gettext("Delay must be an integer.");
 		}
+		if ($data['delay'] && is_numeric($data['delay']) &&
+		    (($data['delay'] < 0) || ($data['delay'] > 10000))) {
+			$input_errors[] = gettext("Delay must be an integer between 0 and 10000.");
+		}
 
 		/* Limiter patch */
 		$selectedScheduler = getSchedulers()[$data['sched']];