Re: [PATCH] be paranoid about closed stdin/stdout/stderr
From: Johannes Sixt <hidden>
Date: 2016-06-15 22:45:14
Paolo Bonzini schrieb:
Junio C Hamano wrote:quoted
Johannes Sixt [off-list ref] writes:quoted
Paolo Bonzini schrieb:quoted
+ /* + * Always open file descriptors 0/1/2 to avoid clobbering files + * in die(). It also avoids not messing up when the pipes are + * dup'ed onto stdin/stdout/stderr in the child processes we spawn. + */I see your point, but I don't have an opinion whether this stretch is necessary.This is going too far. Have you seen any other sane program that do this?Busybox. But it runs setuid, as Steven pointed out.
I straced tee (it was the only tool I found that opens files for writing without also opening some for reading). If one of 0,1,2 is closed, it *does* dup() the fd that it is going to write. Don't you now feel like Reg in "Life of Brian": "All right, but apart from the sanitation, the medicine, education, wine, public order, irrigation, roads, a fresh water system, and public health, what have the Romans ever done for us?" ;) -- Hannes