Gary Lockyer 8b3c582511 lib/async_req/async_sock.c set socket close on exec ...

Set SOCKET_CLOEXEC on the sockets returned by accept.  This ensures that
the socket is unavailable to any child process created by system().
Making it harder for malicious code to set up a command channel,
as seen in the exploit for CVE-2015-0240

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2017-12-18 04:38:19 +01:00

..

async_connect_send_test.c

lib: tevent: Use system <tevent.h>, not internal header path (except in self-test).

2017-08-16 20:58:13 +02:00

async_sock.c

lib/async_req/async_sock.c set socket close on exec

2017-12-18 04:38:19 +01:00

async_sock.h

lib: Add accept_send/recv

2016-06-07 14:34:10 +02:00

wscript_build

lib/async_req: do not install async_connect_send_test.

2015-12-01 17:41:19 +01:00