From b49865be8e798e567a23c01f188546aef514ba06 Mon Sep 17 00:00:00 2001
From: Ulrich Drepper <drepper@gmail.com>
Date: Thu, 8 Sep 2011 00:00:01 -0400
Subject: [PATCH] Use O_CLOEXEC when loading objects in ld.so

---
 ChangeLog     | 2 ++
 elf/dl-load.c | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ChangeLog b/ChangeLog
index 0d2580d5b9..94d502ac6f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,7 @@
 2011-09-07  Ulrich Drepper  <drepper@gmail.com>
 
+	* elf/dl-load.c (open_verify): Use O_CLOEXEC.
+
 	* elf/dl-libc.c (dlerror_run): Pass back error code from
 	dl_catch_error.
 
diff --git a/elf/dl-load.c b/elf/dl-load.c
index 7d7008dd75..e8d0401f24 100644
--- a/elf/dl-load.c
+++ b/elf/dl-load.c
@@ -1706,7 +1706,7 @@ open_verify (const char *name, struct filebuf *fbp, struct link_map *loader,
 #endif
 
   /* Open the file.  We always open files read-only.  */
-  int fd = __open (name, O_RDONLY);
+  int fd = __open (name, O_RDONLY | O_CLOEXEC);
   if (fd != -1)
     {
       ElfW(Ehdr) *ehdr;