[Poppler-bugs] [Bug 107597] opens files without CLOEXEC

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Fri Aug 17 19:48:34 UTC 2018


https://bugs.freedesktop.org/show_bug.cgi?id=107597

--- Comment #2 from Christian Persch (GNOME) <chpe at gnome.org> ---
When a file isn't opened with O_CLOEXEC, and the process using the poppler
library fork()+exec()es, the open file descriptor will leak from it to the
spawned process, giving the new process access to a file it should not have
access to.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/poppler-bugs/attachments/20180817/5482717a/attachment.html>


More information about the Poppler-bugs mailing list