diff options
| author | Andrei Vagin <avagin@gmail.com> | 2022-05-26 17:33:09 -0700 |
|---|---|---|
| committer | Aleksandr Nogikh <wp32pw@gmail.com> | 2022-05-27 19:29:19 +0200 |
| commit | 91c583067cd169dd9d245b9440be128f1dbf0474 (patch) | |
| tree | a1670209fc6e25f63bc833fd925a921207a04e89 /executor | |
| parent | 116e7a7b1ef308fdbd067a06362c8bec9397e217 (diff) | |
osutil: create memfd with the MFD_CLOEXEC flag
Go-runtime opens all files with CLOEXEC by default.
exec.Cmd doesn't close file descriptors in a child process and so memfd without
CLOEXEC can leak to an executor process where its content can be corrupted by
one of test system calls.
Diffstat (limited to 'executor')
0 files changed, 0 insertions, 0 deletions