From 9dec9dbc4bbd09a59cf35f4000d26794b42edcfc Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 11 Nov 2025 07:18:43 +0900 Subject: container/init: close setup pipe early This prevents leaking the setup pipe. Signed-off-by: Ophestra --- container/init.go | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) (limited to 'container/init.go') diff --git a/container/init.go b/container/init.go index 592ef302..fa220f25 100644 --- a/container/init.go +++ b/container/init.go @@ -330,6 +330,10 @@ func initEntrypoint(k syscallDispatcher, msg message.Msg) { } k.umask(oldmask) + if err := closeSetup(); err != nil { + k.fatalf(msg, "cannot close setup pipe: %v", err) + } + cmd := exec.Command(params.Path.String()) cmd.Stdin, cmd.Stdout, cmd.Stderr = os.Stdin, os.Stdout, os.Stderr cmd.Args = params.Args @@ -342,11 +346,6 @@ func initEntrypoint(k syscallDispatcher, msg message.Msg) { k.fatalf(msg, "%v", err) } - if err := closeSetup(); err != nil { - k.printf(msg, "cannot close setup pipe: %v", err) - // not fatal - } - type winfo struct { wpid int wstatus WaitStatus -- cgit v1.3.1