opnsense-src/lib/libcasper/services
Mark Johnston c78e42e207 cap_fileargs: Fix a descriptor leak in the service process.
The service handler for fileargs_open() tries to pre-open multiple files
and pass descriptors for each back to the sandboxed process in a single
message.  This is to amortize the cost of round-trips between the two
processes.

The service process adds a "cache" nvlist to the reply to "open",
containing file descriptors for pre-opened files.  However, when adding
that nvlist to the reply, it was making a copy, effectively leaking the
cached descriptors.

While here, fix spelling in a local variable name.

PR:		241226
Reviewed by:	oshogbo
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D25095
2020-06-01 15:32:13 +00:00
..
cap_dns cap_dns.3: fix some orphan .Xr links 2020-04-18 20:13:43 +00:00
cap_fileargs cap_fileargs: Fix a descriptor leak in the service process. 2020-06-01 15:32:13 +00:00
cap_grp libcasper(3): Export functions to C++ 2020-04-07 16:40:41 +00:00
cap_pwd libcasper(3): Export functions to C++ 2020-04-07 16:40:41 +00:00
cap_sysctl libcasper(3): Export functions to C++ 2020-04-07 16:40:41 +00:00
cap_syslog libcasper(3): Export functions to C++ 2020-04-07 16:40:41 +00:00
tests DIRDEPS_BUILD: Connect new directories. 2017-10-31 00:04:07 +00:00
Makefile Remove cap_random(3). 2019-07-24 22:50:43 +00:00
Makefile.inc