From: Mark Wielaard <mark@klomp.org>
Date: Mon, 25 Nov 2024 10:28:44 +0000 (+0200)
Subject: xz: Landlock: Fix a file descriptor leak
X-Git-Tag: v5.6.4~39
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d9c2e7572bdba5fce4bfd8893d7d2ba376c5739d;p=thirdparty%2Fxz.git

xz: Landlock: Fix a file descriptor leak

(cherry picked from commit 48ff3f06521ca326996ab9a04d1b342098960427)
---

diff --git a/src/xz/sandbox.c b/src/xz/sandbox.c
index 5bd22737..5a12f69b 100644
--- a/src/xz/sandbox.c
+++ b/src/xz/sandbox.c
@@ -196,6 +196,7 @@ enable_landlock(uint64_t required_rights)
 	if (syscall(SYS_landlock_restrict_self, ruleset_fd, 0U) != 0)
 		message_fatal(_("Failed to enable the sandbox"));
 
+	(void)close(ruleset_fd);
 	return;
 }