opnsense-src/lib/libcasper/services/cap_fileargs
Mark Johnston c78e42e207 cap_fileargs: Fix a descriptor leak in the service process.
The service handler for fileargs_open() tries to pre-open multiple files
and pass descriptors for each back to the sandboxed process in a single
message.  This is to amortize the cost of round-trips between the two
processes.

The service process adds a "cache" nvlist to the reply to "open",
containing file descriptors for pre-opened files.  However, when adding
that nvlist to the reply, it was making a copy, effectively leaking the
cached descriptors.

While here, fix spelling in a local variable name.

PR:		241226
Reviewed by:	oshogbo
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D25095
2020-06-01 15:32:13 +00:00
..
cap_fileargs.3 fileargs: fix formating in EXAMPLES 2019-07-30 08:53:03 +00:00
cap_fileargs.c cap_fileargs: Fix a descriptor leak in the service process. 2020-06-01 15:32:13 +00:00
cap_fileargs.h libcasper(3): Export functions to C++ 2020-04-07 16:40:41 +00:00
Makefile pkgbase: Move libcap_ to FreeBSD-runtime 2019-09-05 14:10:26 +00:00
Makefile.depend Update Makefile.depend files 2019-12-11 17:37:53 +00:00