net: coerce -0 to +0 in BlockList prefixes

panva · aduh95 · commit 3988efa1f3d1 · 2026-06-18T10:09:48.000+02:00
Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: #63556 Reviewed-By: Jordan Harband <ljharb@gmail.com> Reviewed-By: Chemi Atlow <chemi@atlow.co.il>
diff --git a/lib/internal/blocklist.js b/lib/internal/blocklist.js
@@ -123,6 +123,8 @@ class BlockList {
         validateInt32(prefix, 'prefix', 0, 128);
         break;
     }
+    // Coerce -0 to +0.
+    prefix += 0;
     this[kHandle].addSubnet(network[kSocketAddressHandle], prefix);
   }
 
diff --git a/test/parallel/test-net-negative-zero.js b/test/parallel/test-net-negative-zero.js
@@ -0,0 +1,15 @@
+'use strict';
+
+require('../common');
+
+const net = require('net');
+
+{
+  const blockList = new net.BlockList();
+  blockList.addSubnet('0.0.0.0', -0);
+}
+
+{
+  const blockList = new net.BlockList();
+  blockList.addSubnet('::', -0, 'ipv6');
+}

Original file line number	Diff line number	Diff line change
`@@ -123,6 +123,8 @@ class BlockList {`
`123`	`123`	`validateInt32(prefix, 'prefix', 0, 128);`
`124`	`124`	`break;`
`125`	`125`	`}`
	`126`	`+ // Coerce -0 to +0.`
	`127`	`+ prefix += 0;`
`126`	`128`	`this[kHandle].addSubnet(network[kSocketAddressHandle], prefix);`
`127`	`129`	`}`
`128`	`130`