netinet6: Disallow connections to IN6ADDR_ANY

Previously connect() or sendto() to INADDR_ANY or IN6ADDR_ANY reached
some socket bound to some host interface address.  Although this was
intentional it was an artifact of a different era, and is not desirable
now.

In 417b35a97b markj added support to disallow connect() to INADDR_ANY
and IN6ADDR_ANY.  Connections to INADDR_ANY were disabled by default in
cd240957d7.  Follow suit with IN6ADDR_ANY.

Reviewed by:	glebius, markj, zlei
Sponsored by:	The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54306

This commit is contained in:

Ed Maste

2025-12-19 09:15:35 -05:00

parent 90a7728cd8

commit 627e126dbb

1 changed files with 1 additions and 1 deletions

									
										sys/netinet6/in6_pcb.c
									
		+1
		-1
	
												View File
												
				@@ -115,7 +115,7 @@

				SYSCTL_DECL(_net_inet6);

				SYSCTL_DECL(_net_inet6_ip6);

				VNET_DEFINE_STATIC(int, connect_in6addr_wild) = 1;

				VNET_DEFINE_STATIC(int, connect_in6addr_wild) = 0;

				#define	V_connect_in6addr_wild	VNET(connect_in6addr_wild)

				SYSCTL_INT(_net_inet6_ip6, OID_AUTO, connect_in6addr_wild,

				    CTLFLAG_VNET | CTLFLAG_RW, &VNET_NAME(connect_in6addr_wild), 0,