From 4bc92b8fd0a5c22c7d4c6f9323378501c60ff149 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 7 Dec 2020 10:27:11 -0500 Subject: check --mac= for multicast addresses (#3784) --- src/firejail/main.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/firejail/main.c b/src/firejail/main.c index 53300fe2d..b8ed29ece 100644 --- a/src/firejail/main.c +++ b/src/firejail/main.c @@ -2397,6 +2397,13 @@ int main(int argc, char **argv, char **envp) { fprintf(stderr, "Error: invalid MAC address\n"); exit(1); } + + // check multicast address + if (br->macsandbox[0] & 1) { + fprintf(stderr, "Error: invalid MAC address (multicast)\n"); + exit(1); + } + } else exit_err_feature("networking"); -- cgit v1.2.3-70-g09d2