API2::Firewall::IPSet: fix alias check for ipv6 addresses

diff --git a/src/PVE/API2/Firewall/IPSet.pm b/src/PVE/API2/Firewall/IPSet.pm
index 60f710596f488911d5b50205853eb6d76b2c336d..1266fd17d4f6b68c05b5c90b476884d8ab1c441f 100644 (file)
--- a/src/PVE/API2/Firewall/IPSet.pm
+++ b/src/PVE/API2/Firewall/IPSet.pm
@@ -188,7 +188,8 @@ sub register_create_ip {
            }
 
            # make sure alias exists (if $cidr is an alias)
-           PVE::Firewall::resolve_alias($cluster_conf, $fw_conf, $cidr); 
+           PVE::Firewall::resolve_alias($cluster_conf, $fw_conf, $cidr)
+               if $cidr =~ m/^${PVE::Firewall::ip_alias_pattern}$/;
 
            my $data = { cidr => $cidr };
 

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 4935be854957e974f2ee20d30d1412295c6b5513..fcbac368459a664f3960c0df30e902306a915d90 100644 (file)
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -39,7 +39,7 @@ eval {
 
 my $security_group_name_pattern = '[A-Za-z][A-Za-z0-9\-\_]+';
 my $ipset_name_pattern = '[A-Za-z][A-Za-z0-9\-\_]+';
-my $ip_alias_pattern = '[A-Za-z][A-Za-z0-9\-\_]+';
+our $ip_alias_pattern = '[A-Za-z][A-Za-z0-9\-\_]+';
 
 my $max_alias_name_length = 64;
 my $max_ipset_name_length = 64;