Skip to content

Commit cf5bd80

Browse files
authored
consider a valid ipv4 address as a validish ipv4 /32 cidr (#10174)
* consider a valid ipv4 address as a validish ipv4 /32 cidr * refactor cidr evaluation for internal nets * Apply suggestions from code review * Update services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java * Update services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java
1 parent 35fe19f commit cf5bd80

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

services/secondary-storage/controller/src/main/java/org/apache/cloudstack/secondarystorage/SecondaryStorageManagerImpl.java

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -402,10 +402,13 @@ private List<String> getAllowedInternalSiteCidrs() {
402402
}
403403
String[] cidrs = _allowedInternalSites.split(",");
404404
for (String cidr : cidrs) {
405-
if (NetUtils.isValidIp4Cidr(cidr) || NetUtils.isValidIp4(cidr) || !cidr.startsWith("0.0.0.0")) {
406-
if (NetUtils.getCleanIp4Cidr(cidr).equals(cidr)) {
405+
if (NetUtils.isValidIp4Cidr(cidr) && !cidr.startsWith("0.0.0.0")) {
406+
if (! NetUtils.getCleanIp4Cidr(cidr).equals(cidr)) {
407407
s_logger.warn(String.format("Invalid CIDR %s in %s", cidr, SecStorageAllowedInternalDownloadSites.key()));
408408
}
409+
allowedCidrs.add(NetUtils.getCleanIp4Cidr(cidr));
410+
} else if (NetUtils.isValidIp4(cidr) && !cidr.startsWith("0.0.0.0")) {
411+
s_logger.warn(String.format("Ip address is not a valid CIDR; %s consider using %s/32", cidr, cidr));
409412
allowedCidrs.add(cidr);
410413
}
411414
}

0 commit comments

Comments
 (0)