mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Validate Prefix Delegation range to make sure addresses match first network address, otherwise DHCPd will silently fail

Browse Source
This commit is contained in:
Renato Botelho 2016-02-18 16:03:01 -02:00
parent 0e00ad80b0
commit bcc2b417c2
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
src/usr/local/www/services_dhcpv6.php
View File

@ -208,6 +208,30 @@ if ($_POST) {
if (($_POST['prefixrange_to'] && !is_ipaddrv6($_POST['prefixrange_to']))) {
$input_errors[] = gettext("A valid prefix range must be specified.");
}
if ($_POST['prefixrange_from'] && $_POST['prefixrange_to'] &&
$_POST['prefixrange_length']) {
$netmask = Net_IPv6::getNetmask($_POST['prefixrange_from'],
$_POST['prefixrange_length']);
$netmask = Net_IPv6::compress($netmask);
if ($netmask != Net_IPv6::compress($_POST['prefixrange_from'])) {
$input_errors[] = sprintf(gettext(
"Prefix Delegation From address is not a valid IPv6 Netmask for %s"),
$netmask . '/' . $_POST['prefixrange_length']);
}
$netmask = Net_IPv6::getNetmask($_POST['prefixrange_to'],
$_POST['prefixrange_length']);
$netmask = Net_IPv6::compress($netmask);
if ($netmask != Net_IPv6::compress($_POST['prefixrange_to'])) {
$input_errors[] = sprintf(gettext(
"Prefix Delegation To address is not a valid IPv6 Netmask for %s"),
$netmask . '/' . $_POST['prefixrange_length']);
}
}
if (($_POST['range_from'] && !is_ipaddrv6($_POST['range_from']))) {
$input_errors[] = gettext("A valid range must be specified.");
}