UDS: Check address before listen(grpc)

transport/internet/grpc/config_test.go

@@ -1,10 +1,14 @@
 package grpc
 
 import (
+	"context"
 	"reflect"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
+	"github.com/xtls/xray-core/common/net"
+	"github.com/xtls/xray-core/transport/internet"
+	"github.com/xtls/xray-core/transport/internet/stat"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials/insecure"
 )
@@ -127,3 +131,17 @@ func TestSetUserAgent(t *testing.T) {
 	setUserAgent(conn, ua)
 	assert.Equal(t, ua, reflect.ValueOf(conn).Elem().FieldByName("dopts").FieldByName("copts").FieldByName("UserAgent").String())
 }
+
+func TestListenUnixRejectsIPAddress(t *testing.T) {
+	settings := &internet.MemoryStreamConfig{
+		ProtocolSettings: &Config{},
+	}
+
+	var listener internet.Listener
+	var err error
+	assert.NotPanics(t, func() {
+		listener, err = Listen(context.Background(), net.AnyIP, net.Port(0), settings, func(stat.Connection) {})
+	})
+	assert.Nil(t, listener)
+	assert.ErrorContains(t, err, "invalid unix listen")
+}

transport/internet/grpc/hub.go

@@ -55,6 +55,9 @@ func Listen(ctx context.Context, address net.Address, port net.Port, settings *i
 	grpcSettings := settings.ProtocolSettings.(*Config)
 	var listener *Listener
 	if port == net.Port(0) { // unix
+		if !address.Family().IsDomain() {
+			return nil, errors.New("invalid unix listen: ", address).AtError()
+		}
 		listener = &Listener{
 			handler: handler,
 			local: &net.UnixAddr{