[Poppler-bugs] [Bug 107597] opens files without CLOEXEC
bugzilla-daemon at freedesktop.org
bugzilla-daemon at freedesktop.org
Fri Aug 17 19:48:34 UTC 2018
https://bugs.freedesktop.org/show_bug.cgi?id=107597
--- Comment #2 from Christian Persch (GNOME) <chpe at gnome.org> ---
When a file isn't opened with O_CLOEXEC, and the process using the poppler
library fork()+exec()es, the open file descriptor will leak from it to the
spawned process, giving the new process access to a file it should not have
access to.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/poppler-bugs/attachments/20180817/5482717a/attachment.html>
More information about the Poppler-bugs
mailing list