Skip to content

Use PerlLIO_dup_cloexec in Perl_dirp_dup to set O_CLOEXEC #23361

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 9, 2025
Merged

Use PerlLIO_dup_cloexec in Perl_dirp_dup to set O_CLOEXEC #23361

merged 1 commit into from
Jun 9, 2025

Conversation

Leont
Copy link
Contributor

@Leont Leont commented Jun 9, 2025

dup doesn't mark the new descriptor as close-on-exec, which can lead to a descriptor leaking to the new process.
@Leont
Use PerlLIO_dup_cloexec in Perl_dirp_dup to set O_CLOEXEC
3de3753 
dup doesn't mark the new descriptor as close-on-exec, which can lead to
a descriptor leaking to the new process.
@Leont Leont merged commit d6f09a8 into blead Jun 9, 2025
68 checks passed
@ap
Copy link
Contributor

ap commented Jun 12, 2025

@steve-m-hay This should be applied to maint-5.38 and maint-5.40 before the security release. (Aside from this we also need a perldelta entry before they can ship.)
@steve-m-hay
Copy link
Contributor

@steve-m-hay This should be applied to maint-5.38 and maint-5.40 before the security release. (Aside from this we also need a perldelta entry before they can ship.)

Cherry-picked as required.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
5 participants
@Leont @ap @steve-m-hay @ilmari @khwilliamson
close