git: 6b61852b4f00 - main - mac_portacl: do not reject unspecific family directly

The branch main has been updated by imp:

URL: https://cgit.FreeBSD.org/src/commit/?id=6b61852b4f000431eb83ce26584da806f64d4643

commit 6b61852b4f000431eb83ce26584da806f64d4643
Author:     K Rin <rin@sandb0x.tw>
AuthorDate: 2025-04-12 02:28:52 +0000
Commit:     Warner Losh <imp@FreeBSD.org>
CommitDate: 2026-06-10 12:35:02 +0000

    mac_portacl: do not reject unspecific family directly
    
    Reviewed by: imp,emaste
    Pull Request: https://github.com/freebsd/freebsd-src/pull/1659
---
 sys/security/mac_portacl/mac_portacl.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sys/security/mac_portacl/mac_portacl.c b/sys/security/mac_portacl/mac_portacl.c
index b3a5e06c0e2a..1cbfcad83acf 100644
--- a/sys/security/mac_portacl/mac_portacl.c
+++ b/sys/security/mac_portacl/mac_portacl.c
@@ -452,7 +452,8 @@ socket_check_bind(struct ucred *cred, struct socket *so,
 		return (0);
 
 	/* Reject addresses we don't understand; fail closed. */
-	if (sa->sa_family != AF_INET && sa->sa_family != AF_INET6)
+	if (sa->sa_family != AF_UNSPEC && sa->sa_family != AF_INET &&
+	    sa->sa_family != AF_INET6)
 		return (EINVAL);
 
 	family = so->so_proto->pr_domain->dom_family;