diff options
| author | Brendan Creane <bcreane@users.noreply.github.com> | 2026-03-20 10:10:43 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-20 10:10:43 -0700 |
| commit | ffa7df2789b883b806be221161babfb4c3f53ab2 (patch) | |
| tree | bb7908f469892f8ac1f10f4357c147a7becc4908 /control/controlhttp/controlhttpserver | |
| parent | 79f71beb248e754709e8a17245d37f08eace52d7 (diff) | |
| download | tailscale-ffa7df2789b883b806be221161babfb4c3f53ab2.tar.xz tailscale-ffa7df2789b883b806be221161babfb4c3f53ab2.zip | |
ipn: reject advertised routes with non-address bits set (#18649)
* ipn: reject advertised routes with non-address bits set
The config file path, EditPrefs local API, and App Connector API were
accepting invalid subnet route prefixes with non-address bits set (e.g.,
2a01:4f9:c010:c015::1/64 instead of 2a01:4f9:c010:c015::/64). All three
paths now reject prefixes where prefix != prefix.Masked() with an error
message indicating the expected masked form.
Updates tailscale/corp#36738
Signed-off-by: Brendan Creane <bcreane@gmail.com>
* address review comments
Signed-off-by: Brendan Creane <bcreane@gmail.com>
---------
Signed-off-by: Brendan Creane <bcreane@gmail.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver')
0 files changed, 0 insertions, 0 deletions