Skip to content

Commit b6ff171

Browse files
DaanHooglanddhslove
authored andcommitted
consider a valid ipv4 address as a validish ipv4 /32 cidr (apache#10174)
* consider a valid ipv4 address as a validish ipv4 /32 cidr * refactor cidr evaluation for internal nets * Apply suggestions from code review * Update services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java * Update services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java
1 parent 4b9319c commit b6ff171

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -400,10 +400,13 @@ private List<String> getAllowedInternalSiteCidrs() {
400400
}
401401
String[] cidrs = _allowedInternalSites.split(",");
402402
for (String cidr : cidrs) {
403-
if (NetUtils.isValidIp4Cidr(cidr) || NetUtils.isValidIp4(cidr) || !cidr.startsWith("0.0.0.0")) {
404-
if (NetUtils.getCleanIp4Cidr(cidr).equals(cidr)) {
405-
logger.warn(String.format("Invalid CIDR %s in %s", cidr, SecStorageAllowedInternalDownloadSites.key()));
403+
if (NetUtils.isValidIp4Cidr(cidr) && !cidr.startsWith("0.0.0.0")) {
404+
if (! NetUtils.getCleanIp4Cidr(cidr).equals(cidr)) {
405+
s_logger.warn(String.format("Invalid CIDR %s in %s", cidr, SecStorageAllowedInternalDownloadSites.key()));
406406
}
407+
allowedCidrs.add(NetUtils.getCleanIp4Cidr(cidr));
408+
} else if (NetUtils.isValidIp4(cidr) && !cidr.startsWith("0.0.0.0")) {
409+
s_logger.warn(String.format("Ip address is not a valid CIDR; %s consider using %s/32", cidr, cidr));
407410
allowedCidrs.add(cidr);
408411
}
409412
}

0 commit comments

Comments
 (0)