From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 20 Nov 2025 13:43:41 +0000 (+0100)
Subject: crash-handler: also disable dlopen(), just in case
X-Git-Tag: v259-rc2~34^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F39824%2Fhead;p=thirdparty%2Fsystemd.git

crash-handler: also disable dlopen(), just in case
---

diff --git a/src/core/crash-handler.c b/src/core/crash-handler.c
index 124d4b886b4..495e9efc9b5 100644
--- a/src/core/crash-handler.c
+++ b/src/core/crash-handler.c
@@ -7,6 +7,7 @@
 
 #include "constants.h"
 #include "crash-handler.h"
+#include "dlfcn-util.h"
 #include "exit-status.h"
 #include "format-util.h"
 #include "log.h"
@@ -70,6 +71,9 @@ _noreturn_ static void crash(int sig, siginfo_t *siginfo, void *context) {
          * memory allocation is not async-signal-safe anyway — see signal-safety(7) for details —, and thus
          * is not permissible in signal handlers.) */
 
+        block_dlopen(); /* paranoia: never end up doing dlopen() as side-effect from some call anymore from
+                         * here */
+
         if (getpid_cached() != 1)
                 /* Pass this on immediately, if this is not PID 1 */
                 propagate_signal(sig, siginfo);