From 141fb51f1a3c22c45025426775c00f66c06406a7 Mon Sep 17 00:00:00 2001
From: Maria Matejka <mq@ucw.cz>
Date: Tue, 7 Jun 2022 10:35:48 +0200
Subject: IPv4 flowspec literals should reject IPv6 prefices in a well-behaved
 way

When writing flow4 { dst 2001:db8::dead:beef/128; }, BIRD crashed on an
not-well-debuggable segfault as it tried to copy the whole 128-bit
prefix into an IPv4-sized memory.
---
 conf/flowspec.Y | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'conf/flowspec.Y')

diff --git a/conf/flowspec.Y b/conf/flowspec.Y
index 56a7c5dc..dbdbdda5 100644
--- a/conf/flowspec.Y
+++ b/conf/flowspec.Y
@@ -142,7 +142,7 @@ flow_frag_opts:
  ;
 
 flow4_item:
-   flow_srcdst net_ip {
+   flow_srcdst net_ip4 {
      flow_builder_set_type(this_flow, $1);
      flow_builder4_add_pfx(this_flow, (net_addr_ip4 *) &($2));
    }
-- 
cgit v1.2.3