mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
34f7894719
Set SOCKET_CLOEXEC on the sockets returned by accept. This ensures that the socket is unavailable to any child process created by system(). Making it harder for malicious code to set up a command channel, as seen in the exploit for CVE-2015-0240 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> |
||
---|---|---|
.. | ||
ctdb_tcp.h | ||
tcp_connect.c | ||
tcp_init.c | ||
tcp_io.c |