rem: info->mask = htonl(0xFFFFFFFF << (32 - atoi(argv[optind-1])));
add: i = atoi(argv[optind-1]); if ((i < 0) || (i > 32)) exit_error(PARAMETER_PROBLEM, "--connlimit-mask must be between 0 and 32");  if (i == 0) info->mask = 0; else info->mask = htonl(0xFFFFFFFF << (32 - i));
context: parse(int c, char **argv, int invert, unsigned int *flags,      const struct ipt_entry *entry,      unsigned int *nfcache,      struct ipt_entry_match **match){	struct ipt_connlimit_info *info = (struct ipt_connlimit_info*)(*match)->data;	if (0 == (*flags & 2)) {		/* set default mask unless we've already seen a mask option */		info->mask = htonl(0xFFFFFFFF);	}	switch (c) {	case '1':		check_inverse(optarg, &invert, &optind, 0);		info->limit = atoi(argv[optind-1]);		info->inverse = invert;		*flags |= 1;		break;	case '2':		info->mask = htonl(0xFFFFFFFF << (32 - atoi(argv[optind-1])));		*flags |= 2;		break;	default:		return 0;	}	return 1;}