commit 6788cabc608efd3c096965577d825785e02fe406
author Nick Kralevich <nnk@google.com> Thu Oct 18 16:08:39 2018 -0700
committer Nick Kralevich <nnk@google.com> Thu Oct 18 16:09:40 2018 -0700
tree 587286d4b635d52119a9aee621ac4410e19f62f8
parent f4b3a4f791b795c903c87e3641a32d1387fb2107

Add O_CLOEXEC

Prevent an FD from accidentally leaking across an exec() boundary.

Test: code compiles.
Change-Id: I90ca6e332802700403f401db016cc6c0c72b0ea3

init/property_service.cpp

diff --git a/init/property_service.cpp b/init/property_service.cpp
index 5c8b92a..6aed0a3 100644
--- a/init/property_service.cpp
+++ b/init/property_service.cpp
@@ -746,7 +746,7 @@
         return;
     }
 
-    int fd = open(rec->blk_device, O_RDONLY);
+    int fd = open(rec->blk_device, O_RDONLY | O_CLOEXEC);
     if (fd == -1) {
         PLOG(ERROR) << "error opening block device " << rec->blk_device;
         return;