From f102c5f341dcbba552dcbc5323ed981e8679fe3a Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 26 Jun 2012 12:50:58 +0200
Subject: [PATCH] Mask the configured mark value to ensure it is in range

---
 src/starter/confread.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/starter/confread.c b/src/starter/confread.c
index 671cfbab15..cd011afa48 100644
--- a/src/starter/confread.c
+++ b/src/starter/confread.c
@@ -449,6 +449,8 @@ static bool handle_mark(char *value, mark_t *mark)
 			return FALSE;
 		}
 	}
+	/* apply the mask to ensure the value is in range */
+	mark->value &= mark->mask;
 	return TRUE;
 }