diff --git a/CHANGES b/CHANGES index ed4f105f..30d0ea54 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,8 @@ DD MMM YYYY - 2.9.3 - To be released ------------------------------------ + * Fix ip tree lookup on netmask content + [Issue #1793 - @tinselcity, @zimmerle] * IIS: set overrideModeDefault to Allow so that individual websites can add to their web.config file [Issue #1781 - @default-kramer] diff --git a/apache2/msc_tree.c b/apache2/msc_tree.c index ddbc4f21..07c76a00 100644 --- a/apache2/msc_tree.c +++ b/apache2/msc_tree.c @@ -755,7 +755,7 @@ TreeNode *CPTFindElement(modsec_rec *msr, unsigned char *ipdata, unsigned int ip return node; } - if (memcmp(node->prefix->buffer, temp_data, bytes) == 0) { + if ((node->netmasks == NULL) && (memcmp(node->prefix->buffer, temp_data, bytes) == 0)) { mask = SHIFT_LEFT_MASK(8 - ip_bitmask % 8); if ((ip_bitmask % 8) == 0) {