commit 98eebb453861602bdf8ccd0f2898dc6c30602f98
author Nick Kralevich <nnk@google.com> Tue Dec 18 13:46:34 2018 -0800
committer Nick Kralevich <nnk@google.com> Tue Dec 18 13:46:34 2018 -0800
tree cebfb87d24653035e1fbe913da65814f731bc889
parent c538043c13d858c6e3f6701229d734168192ff26

OpenjdkJvm.cc: Add O_CLOEXEC

Prevent file descriptors from leaking across an exec() boundary by
setting the O_CLOEXEC flag.

Bug: 120983106
Test: compiles and boots
Change-Id: I61343302ebe0f5d26ffe0b1f9e9a61fe29e9b715

openjdkjvm/OpenjdkJvm.cc

diff --git a/openjdkjvm/OpenjdkJvm.cc b/openjdkjvm/OpenjdkJvm.cc
index 7a388c9..b2c4bb7 100644
--- a/openjdkjvm/OpenjdkJvm.cc
+++ b/openjdkjvm/OpenjdkJvm.cc
@@ -77,6 +77,7 @@
                    << fname << "')";
     }
 
+    flags |= O_CLOEXEC;
     int fd = TEMP_FAILURE_RETRY(open(fname, flags & ~JVM_O_DELETE, mode));
     if (fd < 0) {
         int err = errno;