From 98eebb453861602bdf8ccd0f2898dc6c30602f98 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Tue, 18 Dec 2018 13:46:34 -0800
Subject: OpenjdkJvm.cc: Add O_CLOEXEC

Prevent file descriptors from leaking across an exec() boundary by
setting the O_CLOEXEC flag.

Bug: 120983106
Test: compiles and boots
Change-Id: I61343302ebe0f5d26ffe0b1f9e9a61fe29e9b715
---
 openjdkjvm/OpenjdkJvm.cc | 1 +
 1 file changed, 1 insertion(+)

(limited to 'openjdkjvm/OpenjdkJvm.cc')

diff --git a/openjdkjvm/OpenjdkJvm.cc b/openjdkjvm/OpenjdkJvm.cc
index 7a388c9583..b2c4bb7236 100644
--- a/openjdkjvm/OpenjdkJvm.cc
+++ b/openjdkjvm/OpenjdkJvm.cc
@@ -77,6 +77,7 @@ JNIEXPORT jint JVM_Open(const char* fname, jint flags, jint mode) {
                    << fname << "')";
     }
 
+    flags |= O_CLOEXEC;
     int fd = TEMP_FAILURE_RETRY(open(fname, flags & ~JVM_O_DELETE, mode));
     if (fd < 0) {
         int err = errno;
-- 
cgit v1.2.3-59-g8ed1b