From: Florian Weimer <fweimer@redhat.com>
Date: Mon, 18 Jun 2018 11:08:08 +0000 (+0200)
Subject: Linux: Create Netlink socket with SOCK_CLOEXEC in __check_pf [BZ #15722]
X-Git-Tag: glibc-2.28~188
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3fe8fc793f2e98c28c07428fabdeaf2f3c3480c7;p=thirdparty%2Fglibc.git

Linux: Create Netlink socket with SOCK_CLOEXEC in __check_pf [BZ #15722]
---

diff --git a/ChangeLog b/ChangeLog
index 3cf598575f7..2f717067590 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2018-06-18  Florian Weimer  <fweimer@redhat.com>
+
+	[BZ #15722]
+	* sysdeps/unix/sysv/linux/check_pf.c (__check_pf): Create Netlink
+	socket with SOCK_CLOEXEC.
+
 2018-06-18  Joseph Myers  <joseph@codesourcery.com>
 
 	[BZ #23303]
diff --git a/sysdeps/unix/sysv/linux/check_pf.c b/sysdeps/unix/sysv/linux/check_pf.c
index 36326abe804..04cd104aec5 100644
--- a/sysdeps/unix/sysv/linux/check_pf.c
+++ b/sysdeps/unix/sysv/linux/check_pf.c
@@ -313,7 +313,7 @@ __check_pf (bool *seen_ipv4, bool *seen_ipv6,
     }
   else
     {
-      int fd = __socket (PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
+      int fd = __socket (PF_NETLINK, SOCK_RAW | SOCK_CLOEXEC, NETLINK_ROUTE);
 
       if (__glibc_likely (fd >= 0))
 	{