add check for ipv6 address syntax

1 files changed, 9 insertions, 7 deletions

diff --git a/src/firejail/profile.c b/src/firejail/profile.c
index c14f2b1f3..d0c43d13e 100644
--- a/src/firejail/profile.c
+++ b/src/firejail/profile.c
@@ -502,18 +502,20 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
                                 fprintf(stderr, "Error: no network device configured\n");
                                 exit(1);
                         }
-                        if (br->arg_ip_none || br->ip6sandbox) {
+                        if (br->ip6sandbox) {
                                 fprintf(stderr, "Error: cannot configure the IP address twice for the same interface\n");
                                 exit(1);
                         }
 
                         // configure this IP address for the last bridge defined
-                        // todo: verify ipv6 syntax
-                        br->ip6sandbox = ptr + 4;
-//                      if (atoip(argv[i] + 5, &br->ipsandbox)) {
-//                              fprintf(stderr, "Error: invalid IP address\n");
-//                              exit(1);
-//                      }
+                        if (check_ip46_address(ptr + 4) == 0) {
+                                fprintf(stderr, "Error: invalid IPv6 address\n");
+                                exit(1);
+                        }
+
+                        br->ip6sandbox = strdup(ptr + 4);
+                        if (br->ip6sandbox == NULL)
+                                errExit("strdup");
 
                 }
                 else