Handle UnicodeError in firewall when resolving hostname

2021-01-02 15:29:58 -08:00 · 2021-01-02 15:29:58 -08:00 · ed33374f67
commit ed33374f67
parent ba4e7f853d
1 changed files with 3 additions and 0 deletions
--- a/qubesagent/firewall.py
+++ b/qubesagent/firewall.py
@ -619,6 +619,9 @@ class NftablesWorker(FirewallWorker):
                except socket.gaierror as e:
                    raise RuleParseError('Failed to resolve {}: {}'.format(
                        rule['dsthost'], str(e)))
+                except UnicodeError as e:
+                    raise RuleParseError('Invalid destination {}: {}'.format(
+                        rule['dsthost'], str(e)))
                nft_rule += ' {} daddr {{ {} }}'.format(ip_match,
                    ', '.join(set(item[4][0] + fullmask for item in addrinfo)))