fixed bugs caused by bad assumption. Code assumed that after cp_ip_prefix(str, &ip, &mask), you must have (ip & ~mask) == 0. This was NOT in fact true. So added some explicit maskings (basically, ip &= mask).