commit 9515c23e1655849496b34c6265c485fb20d5487f
author Josh Gao <jmgao@google.com> Tue Feb 16 14:24:50 2016 -0800
committer Josh Gao <jmgao@google.com> Tue Feb 16 15:07:35 2016 -0800
tree 4e487e0a93f0ed2d065a4201a16cb586c10c9cc8
parent 9c0ed663138138bb40396bfd350f137e5057277b

debuggerd: use O_NOFOLLOW|O_CLOEXEC for tombstones. DO NOT MERGE

Effectively a cherry-pick of 04f9b2a.

Bug: http://b/26403620
Change-Id: I0437fdc774501f428d8b4f8dd7682b32eaa29cef

debuggerd/tombstone.c

diff --git a/debuggerd/tombstone.c b/debuggerd/tombstone.c
index 7009a8e..29cd76c 100644
--- a/debuggerd/tombstone.c
+++ b/debuggerd/tombstone.c
@@ -759,7 +759,7 @@
         if (errno != ENOENT)
             continue;
 
-        *fd = open(path, O_CREAT | O_EXCL | O_WRONLY, 0600);
+        *fd = open(path, O_CREAT | O_EXCL | O_WRONLY | O_NOFOLLOW | O_CLOEXEC, 0600);
         if (*fd < 0)
             continue;   /* raced ? */
 
@@ -769,7 +769,7 @@
 
     /* we didn't find an available file, so we clobber the oldest one */
     snprintf(path, sizeof(path), TOMBSTONE_DIR"/tombstone_%02d", oldest);
-    *fd = open(path, O_CREAT | O_TRUNC | O_WRONLY, 0600);
+    *fd = open(path, O_CREAT | O_TRUNC | O_WRONLY | O_NOFOLLOW | O_CLOEXEC, 0600);
     if (*fd < 0) {
         LOG("failed to open tombstone file '%s': %s\n", path, strerror(errno));
         return NULL;