On Thu, May 30, 2013 at 12:46:26AM +0200, Arturo Borrero wrote: > Other kind of validations are used all over the XML parsing code. > This validation is not valid anymore, and this patch update it. > > Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@xxxxxxxxx> > --- > src/expr/data_reg.c | 4 +--- > 1 file changed, 1 insertion(+), 3 deletions(-) > > diff --git a/src/expr/data_reg.c b/src/expr/data_reg.c > index 71b10fe..12adc18 100644 > --- a/src/expr/data_reg.c > +++ b/src/expr/data_reg.c > @@ -64,10 +64,8 @@ static int nft_data_reg_verdict_xml_parse(union nft_data_reg *reg, char *xml) > return -1; > } > > - errno = 0; > tmp = strtoll(node->child->value.opaque, &endptr, 10); > - if (tmp > INT_MAX || tmp < INT_MIN || errno != 0 > - || strlen(endptr) > 0) { > + if (tmp > INT_MAX || tmp < INT_MIN || *endptr) { I think it's time to add some helper function like nft_stroll. This function will take care of this tricky error handling and it will just return -1 in case of error. You can put this new function in src/utils.c and define it protype in internal.h. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html