freebsd-dev/lib/libcasper
Mark Johnston c78e42e207 cap_fileargs: Fix a descriptor leak in the service process.
The service handler for fileargs_open() tries to pre-open multiple files
and pass descriptors for each back to the sandboxed process in a single
message.  This is to amortize the cost of round-trips between the two
processes.

The service process adds a "cache" nvlist to the reply to "open",
containing file descriptors for pre-opened files.  However, when adding
that nvlist to the reply, it was making a copy, effectively leaking the
cached descriptors.

While here, fix spelling in a local variable name.

PR:		241226
Reviewed by:	oshogbo
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D25095
2020-06-01 15:32:13 +00:00
..
libcasper Update Makefile.depend files 2019-12-11 17:37:53 +00:00
services cap_fileargs: Fix a descriptor leak in the service process. 2020-06-01 15:32:13 +00:00
tests TESTSDIR isn't required; remove it 2017-08-13 01:08:37 +00:00
Makefile libcasper/services: include <src.opts.mk> to hook tests to build 2019-10-23 01:50:41 +00:00
Makefile.inc Introduce caspermocks. 2017-10-28 19:23:57 +00:00