commit 39c26d63cda25247f9c0422a71b0c297c2da2052
author Maciej Żenczykowski <maze@google.com> Wed May 06 14:17:07 2020 -0700
committer Maciej Żenczykowski <maze@google.com> Fri May 08 22:34:37 2020 -0700
tree ea53c5f7d3dac485b2bc3848fdabe567d20652b3
parent 0129aaae86be64d293eb64e25c6acb1a57cbd588

libnetutils/packet.c - create socket with close-on-exec

This prevents fork/exec leaking sockets to child processes.

Test: builds, atest
Bug: 155297277
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: I57cb2003dd75b0bc5528978fd131730273e37a43

libnetutils/packet.c

diff --git a/libnetutils/packet.c b/libnetutils/packet.c
index b3fa909..64de00e 100644
--- a/libnetutils/packet.c
+++ b/libnetutils/packet.c
@@ -40,7 +40,7 @@
 int fatal(const char*);
 
 int open_raw_socket(const char* ifname __unused, uint8_t hwaddr[ETH_ALEN], int if_index) {
-    int s = socket(PF_PACKET, SOCK_DGRAM, 0);
+    int s = socket(PF_PACKET, SOCK_DGRAM | SOCK_CLOEXEC, 0);
     if (s < 0) return fatal("socket(PF_PACKET)");
 
     struct sockaddr_ll bindaddr = {