From cab0c99b1b10604eeb8741438e56e450b3afe04d Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Tue, 3 May 2011 10:00:07 +1000
Subject:  - (djm) closefrom() before running ssh-rand-helper; leftover fds
 noticed    by tmraz AT redhat.com

---
 ChangeLog | 4 ++++
 entropy.c | 1 +
 2 files changed, 5 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 0b20e296..8821368a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20110329
+ - (djm) closefrom() before running ssh-rand-helper; leftover fds noticed
+   by tmraz AT redhat.com
+
 20110221
  - (dtucker) [contrib/cygwin/ssh-host-config] From Corinna: revamp of the
    Cygwin-specific service installer script ssh-host-config.  The actual
diff --git a/entropy.c b/entropy.c
index a8216625..a650351d 100644
--- a/entropy.c
+++ b/entropy.c
@@ -100,6 +100,7 @@ seed_rng(void)
 		close(p[0]);
 		close(p[1]);
 		close(devnull);
+		closefrom(STDERR_FILENO + 1);
 
 		if (original_uid != original_euid &&
 		    ( seteuid(getuid()) == -1 ||
-- 
cgit v1.2.3