[libvirt] [PATCH] Log an error on attempts to add a NAT rule for non-IPv4 addresses

[Eric Blake]

On 01/04/2011 11:14 PM, Laine Stump wrote:
> Although the upper-layer code protected against it, it was possible to
> call iptablesForwardMasquerade() with an IPv6 address and have it
> attempt to add a rule to the MASQUERADE chain of ip6tables (which
> doesn't exist).
> 
> This patch changes that function to check the protocol of the given
> address, generate an error log if it's not IPv4 (AF_INET), and finally
> hardcodes all the family parameters sent down to lower-level functions.

ACK.

-- 
Eric Blake   eblake at redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 619 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20110105/aeaa10c0/attachment-0001.sig>