Fix possible integer overflow calculating IPv6 address

Found by Coverity Scan Signed-off-by: Joachim Wiberg <[email protected]>
troglobit · Sep 8, 2024 · d6e9ab6 · d6e9ab6
1 parent fc63b92
commit d6e9ab6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/inet.c b/src/inet.c
@@ -116,14 +116,14 @@ inet_addr_t inet_netaddr(inet_addr_t *addr, int len)
 			bits -= 32;
 		}
 
-		s6.s6_addr32[pos] = htonl(ntohl(s6.s6_addr32[pos]) & (0xffffffffu << bits));
+		s6.s6_addr32[pos] = htonl(ntohl(s6.s6_addr32[pos]) & ((0xffffffffU << bits) & 0xffffffffU));
 		sin6->sin6_addr = s6;
 	} else
 #endif
 	{
 		struct in_addr *ina = inet_addr_get(&net);
 
-		ina->s_addr = htonl(ntohl(ina->s_addr) & (0xffffffffu << bits));
+		ina->s_addr = htonl(ntohl(ina->s_addr) & ((0xffffffffU << bits) & 0xffffffffU));
 	}
 
 	return net;