Don't listen on a socket whose bind failed #57

Merged

jcoffey-dev merged 1 commits from fix/unbound-listener into main

2026-09-26 08:48:04 +00:00

Author	SHA1	Message	Date
jcoffey-dev	b6f943a77c	Don't listen on a socket whose bind failed ci / fork-checks (pull_request) Successful in 46s Details ci / build (pull_request) Successful in 10m37s Details When a listener couldn't bind its address (a port below 1024 without root, a port already in use, or the legacy-protocols switch putting a listener back after privileges were dropped), the bind error was reported but the socket was still passed to listen(). The kernel then bound it itself, to a random port on every interface, and the server logged the listener as started on the port it was configured with. listen() now refuses a socket that isn't bound, so the listener is reported with a listen error and skipped, and nothing opens anywhere unexpected.	2026-09-26 01:36:39 -07:00

Author

SHA1

Message

Date

jcoffey-dev

b6f943a77c

Don't listen on a socket whose bind failed

ci / fork-checks (pull_request) Successful in 46s

Details

ci / build (pull_request) Successful in 10m37s

Details

When a listener couldn't bind its address (a port below 1024 without
root, a port already in use, or the legacy-protocols switch putting a
listener back after privileges were dropped), the bind error was
reported but the socket was still passed to listen(). The kernel then
bound it itself, to a random port on every interface, and the server
logged the listener as started on the port it was configured with.

listen() now refuses a socket that isn't bound, so the listener is
reported with a listen error and skipped, and nothing opens anywhere
unexpected.

2026-09-26 01:36:39 -07:00