Bug#410671: iceweasel: firefox leaks filehandles to external applications

[Jörg Sommer]

Hallo Mike,

Mike Hommey hat am Sun 02. Oct, 16:20 (+0200) geschrieben:
> On Sun, Oct 02, 2011 at 04:12:29PM +0200, Mike Hommey wrote:
> > On Sun, Oct 02, 2011 at 03:18:07PM +0200, Marc Lehmann wrote:
> > > On Sun, Oct 02, 2011 at 01:20:34PM +0200, Jörg Sommer <joerg at alea.gnuu.de> wrote:
> > > > how about using O_CLOEXEC when opening files or sockets?
> > > 
> > > there is no such flag for sockets,

% man socket G -A1 CLOEXEC
 SOCK_CLOEXEC    Set the close-on-exec (FD_CLOEXEC) flag on the new file
                 descriptor.  See the description of the O_CLOEXEC  flag
                 in open(2) for reasons why this may be useful.

> > > nor pipes,

% man pipe G -A1 CLOEXEC
  O_CLOEXEC   Set the close-on-exec (FD_CLOEXEC) flag on the two new file
              descriptors.   See  the  description  of  the  same flag in

> > > but indeed, linux has recently acquired such interfaces, but they
> > > are not portable.

Yes, I see, this is a problem for iceweasel.

> > > fcntl F_SETFD of course works, as well as simply closing all fds not known to
> > > be needed.
> > 
> > See the upstream bug as to why it may or may not possible to use these.
> 
> It also turns out that enabling gio should get us to a better state.

This sounds great. Thanks for bringing up a solution so quick.

Regards, Jörg.
-- 
And 1.1.81 is officially BugFree(tm), so if you receive any bug-reports
on it, you know they are just evil lies.
            (Linus Torvalds)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature http://en.wikipedia.org/wiki/OpenPGP
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20111003/50dd6022/attachment.pgp>