[PATCH] posix_spawn_file_actions_addopen needs to copy the path argument (BZ 17048)

[Florian Weimer]

POSIX requires that we make a copy, so we allocate a new string and free 
it in posix_spawn_file_actions_destroy.

The reporters (David Reid, Alex Gaynor, and Glyph Lefkowitz) are 
concerned that not the old behavior could result in security 
vulnerabilities in applications, and I agree that this cannot be ruled out.

-- 
Florian Weimer / Red Hat Product Security Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-posix_spawn_file_actions_addopen-needs-to-copy-the-p.patch
Type: text/x-patch
Size: 4821 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20140611/bc62ed35/attachment.bin>