ext/sockets: controlling ephemeral port ranges on *BSD.

    whether ephemeral ports are onto the privileged low port ranges
     or a range more fit for restricted scenarios.

close GH-15335

Author: devnexen

NEWS

@@ -52,6 +52,10 @@ PHP                                                                        NEWS
     get_defined_functions(). (Girgias)
   . The SOAP_FUNCTIONS_ALL constant is now deprecated. (Girgias)
 
+- Sockets:
+  . Added IP_PORTRANGE* constants for BSD systems to control ephemeral port
+    ranges. (David Carlier)
+
 - SPL:
   . The SplFixedArray::__wakeup() method has been deprecated as it implements
     __serialize() and __unserialize() which need to be overwritten instead.

UPGRADING

@@ -904,6 +904,10 @@ PHP 8.4 UPGRADE NOTES
   . SO_EXCLBIND (Solaris/Illumos only).
   . SO_NOSIGPIPE (macOs and FreeBSD).
   . SO_LINGER_SEC (macOs only).
+  . IP_PORTRANGE (FreeBSD/NetBSD/OpenBSD only).
+  . IP_PORTRANGE_DEFAULT (FreeBSD/NetBSD/OpenBSD only).
+  . IP_PORTRANGE_HIGH (FreeBSD/NetBSD/OpenBSD only).
+  . IP_PORTRANGE_LOW (FreeBSD/NetBSD/OpenBSD only).
 
 - Sodium:
   . SODIUM_CRYPTO_AEAD_AEGIS128L_KEYBYTES

ext/sockets/sockets.stub.php

@@ -711,6 +711,29 @@
 const IPV6_V6ONLY = UNKNOWN;
 #endif
 
+#ifdef IP_PORTRANGE
+/**
+ * @var int
+ * @cvalue IP_PORTRANGE
+ */
+const IP_PORTRANGE = UNKNOWN;
+/**
+ * @var int
+ * @cvalue IP_PORTRANGE_DEFAULT
+ */
+const IP_PORTRANGE_DEFAULT = UNKNOWN;
+/**
+ * @var int
+ * @cvalue IP_PORTRANGE_HIGH
+ */
+const IP_PORTRANGE_HIGH = UNKNOWN;
+/**
+ * @var int
+ * @cvalue IP_PORTRANGE_LOW
+ */
+const IP_PORTRANGE_LOW = UNKNOWN;
+#endif
+
 #ifdef EPERM
 /**
  * Operation not permitted