From c079b0cc127917288163864c31dbd53a41604b17 Mon Sep 17 00:00:00 2001 From: AaronChen0 Date: Wed, 15 Jul 2026 21:51:32 +0800 Subject: [PATCH] fix: panic on full-width IP-SUFFIX rules (#2975) --- rules/common/ipsuffix.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/common/ipsuffix.go b/rules/common/ipsuffix.go index a1c7a11b..7259c127 100644 --- a/rules/common/ipsuffix.go +++ b/rules/common/ipsuffix.go @@ -47,7 +47,7 @@ func (is *IPSuffix) Match(metadata *C.Metadata, helper C.RuleMatchHelper) (bool, } } - if (is.ipBytes[size-bits/8-1] << (8 - bits%8)) != (mIPBytes[size-bits/8-1] << (8 - bits%8)) { + if bits%8 != 0 && (is.ipBytes[size-bits/8-1] << (8 - bits%8)) != (mIPBytes[size-bits/8-1] << (8 - bits%8)) { return false, "" }