From: Tobias Ulmer Date: Mon, 14 Nov 2016 16:29:44 +0000 (+0100) Subject: e2lib: don't leak writefunc file descriptor into chroot X-Git-Tag: e2factory-2.3.15rc1~6 X-Git-Url: https://git.e2factory.org/?a=commitdiff_plain;h=cefc2bb91e63f1b2b22b471e3a2cfb2ddd9c86f2;p=e2factory.git e2lib: don't leak writefunc file descriptor into chroot Signed-off-by: Tobias Ulmer --- diff --git a/generic/e2lib.lua b/generic/e2lib.lua index 36d3cc0..b0cf1ac 100644 --- a/generic/e2lib.lua +++ b/generic/e2lib.lua @@ -1142,6 +1142,12 @@ function e2lib.callcmd(argv, fdctv, workdir, envdict) fdct._p.rfd = rc fdct._p.wfd = re fdct._p.buffer = "" + + rc, re = eio.cloexec(fdct._p.wfd) + if not rc then + return false, re + end + elseif fdct.istype == "readfo" then else return false, err.new("while setting up parent file " ..