From 6b88781acff0995efd4e78acfa05777e977ad2ed Mon Sep 17 00:00:00 2001
From: ume <ume@FreeBSD.org>
Date: Sun, 24 Jun 2001 20:25:38 +0000
Subject: disallow setsockopt(IPV6_V6ONLY) for already bound sockets.

Obtained from:	KAME
MFC after:	10 days
---
 sys/netinet6/ip6_output.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'sys/netinet6')

diff --git a/sys/netinet6/ip6_output.c b/sys/netinet6/ip6_output.c
index d6a6e80..d0d072e 100644
--- a/sys/netinet6/ip6_output.c
+++ b/sys/netinet6/ip6_output.c
@@ -1366,6 +1366,17 @@ do { \
 
 				case IPV6_V6ONLY:
 					/*
+					 * make setsockopt(IPV6_V6ONLY)
+					 * available only prior to bind(2).
+					 * see ipng mailing list, Jun 22 2001.
+					 */
+					if (in6p->in6p_lport ||
+					    !IN6_IS_ADDR_UNSPECIFIED(&in6p->in6p_laddr))
+					{
+						error = EINVAL;
+						break;
+					}
+					/*
 					 * XXX: BINDV6ONLY should be integrated
 					 * into V6ONLY.
 					 */
-- 
cgit v1.1