From cf084ddad0bcd7fb3b610cd182374bf24f28218a Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Mon, 26 Oct 2026 21:36:57 +0100
Subject: cgnat: T9473: reject pool ranges with host bits set

Internal and external pool ranges also accepted a prefix with host bits
set, such as 100.64.0.1/29. Such a value cannot be converted into a
network and crashed the commit with a Python traceback.

These values are now rejected when set; a range is either a network
prefix or an address range.
---
 interface-definitions/nat_cgnat.xml.in | 2 --
 1 file changed, 2 deletions(-)

(limited to 'interface-definitions')

diff --git a/interface-definitions/nat_cgnat.xml.in b/interface-definitions/nat_cgnat.xml.in
index 20f0bf7d8..9a0fdee9c 100644
--- a/interface-definitions/nat_cgnat.xml.in
+++ b/interface-definitions/nat_cgnat.xml.in
@@ -78,7 +78,6 @@
                       </valueHelp>
                       <constraint>
                         <validator name="ipv4-prefix"/>
-                        <validator name="ipv4-host"/>
                         <validator name="ipv4-range"/>
                       </constraint>
                     </properties>
@@ -126,7 +125,6 @@
                       </valueHelp>
                       <constraint>
                         <validator name="ipv4-prefix"/>
-                        <validator name="ipv4-host"/>
                         <validator name="ipv4-range"/>
                       </constraint>
                       <multi/>
-- 
cgit v1.2.3