From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 17 Oct 2025 11:23:46 +0000 (+0200)
Subject: cf-socket: if FD_CLOEXEC fails on accepted socket, cleanup
X-Git-Tag: rc-8_17_0-3~144
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c0564ceb3a51feb0f5c5236809aa8420644b1fc7;p=thirdparty%2Fcurl.git

cf-socket: if FD_CLOEXEC fails on accepted socket, cleanup

Follow-up to 9d7b532404181568de1611084bd9f

Pointed out by ZeroPath

Closes #19098
---

diff --git a/lib/cf-socket.c b/lib/cf-socket.c
index 758641e40d..40df786baf 100644
--- a/lib/cf-socket.c
+++ b/lib/cf-socket.c
@@ -2138,6 +2138,7 @@ static CURLcode cf_tcp_accept_connect(struct Curl_cfilter *cf,
      (curlx_nonblock(s_accepted, TRUE) < 0)) {
     failf(data, "fcntl set CLOEXEC/NONBLOCK: %s",
           curlx_strerror(SOCKERRNO, errbuf, sizeof(errbuf)));
+    Curl_socket_close(data, cf->conn, s_accepted);
     return CURLE_FTP_ACCEPT_FAILED;
   }
 #endif