- Notifications
You must be signed in to change notification settings - Fork587
Use PerlLIO_dup_cloexec in Perl_dirp_dup to set O_CLOEXEC#23361
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Uh oh!
There was an error while loading.Please reload this page.
Conversation
dup doesn't mark the new descriptor as close-on-exec, which can lead toa descriptor leaking to the new process.
d6f09a8
intobleadUh oh!
There was an error while loading.Please reload this page.
@steve-m-hay This should be applied to maint-5.38 and maint-5.40 before the security release. (Aside from this we also need a perldelta entry before they can ship.) |
Cherry-picked as required. |
dup
doesn't mark the new descriptor as close-on-exec, which can lead to a descriptor leaking to the new process.