commit 2d6ee6e89a4b30c7528d2977df4e1aa86651e4e4
author Baokun Lee <nototon@gmail.com> Fri Aug 02 00:31:57 2019 +0800
committer Ian Lance Taylor <iant@golang.org> Thu Aug 01 20:37:08 2019 +0000
tree 6b1ff898b3835c10ec6361e9e211d9559d372a9f
parent e7c51cad71126c40bf130db30c35953321f32c9d

os: enable the close-on-exec flag for openFdAt

There's a race here with fork/exec, enable the close-on-exec flag
for the new file descriptor.

Fixes #33405

Change-Id: If95bae97a52b7026a930bb3427e47bae3b0032ac
Reviewed-on: https://go-review.googlesource.com/c/go/+/188537
Run-TryBot: Baokun Lee <nototon@gmail.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Ian Lance Taylor <iant@golang.org>

src/os/removeall_at.go

diff --git a/src/os/removeall_at.go b/src/os/removeall_at.go
index 3098b93..bc632f5 100644
--- a/src/os/removeall_at.go
+++ b/src/os/removeall_at.go
@@ -173,7 +173,7 @@
 	var r int
 	for {
 		var e error
-		r, e = unix.Openat(dirfd, name, O_RDONLY, 0)
+		r, e = unix.Openat(dirfd, name, O_RDONLY|syscall.O_CLOEXEC, 0)
 		if e == nil {
 			break
 		}