Blame SOURCES/make-4.3-cloexec.patch

681c5d
From d79fe162c009788888faaf0317253b6f0cac7092 Mon Sep 17 00:00:00 2001
681c5d
From: Kevin Buettner <kevinb@redhat.com>
681c5d
Date: Thu, 23 Apr 2020 17:05:34 -0400
681c5d
Subject: [SV 58232] Disable inheritance of jobserver FDs for recursive make
681c5d
681c5d
A parent make will invoke a sub-make with close-on-exec disabled for
681c5d
the jobserver pipe FDs.  Force close-on-exec to be to be enabled in
681c5d
the sub-make so the pipe is not always passed to child jobs.
681c5d
681c5d
I have a test case which, when invoked with a suitable -j switch,
681c5d
will hang if the recipe inherits the jobserver pipe.  This test case
681c5d
was inspired by a real world case in which testing GDB on Fedora
681c5d
would hang due to some poorly written test GDB cases having been
681c5d
passed the jobserver file descriptors.
681c5d
681c5d
* src/posixos.c (jobserver_parse_auth): Call fd_noinherit() for
681c5d
jobserver pipe descriptors.
681c5d
681c5d
Copyright-paperwork-exempt: yes
681c5d
681c5d
diff --git a/src/posixos.c b/src/posixos.c
681c5d
index 525f292c..eab175a4 100644
681c5d
--- a/src/posixos.c
681c5d
+++ b/src/posixos.c
681c5d
@@ -145,6 +145,11 @@ jobserver_parse_auth (const char *auth)
681c5d
   /* When using pselect() we want the read to be non-blocking.  */
681c5d
   set_blocking (job_fds[0], 0);
681c5d
 
681c5d
+  /* By default we don't send the job pipe FDs to our children.
681c5d
+     See jobserver_pre_child() and jobserver_post_child().  */
681c5d
+  fd_noinherit (job_fds[0]);
681c5d
+  fd_noinherit (job_fds[1]);
681c5d
+
681c5d
   return 1;
681c5d
 }
681c5d