Issue #27776: dev_urandom(raise=0) now closes the file descriptor on error

1 files changed, 1 insertions, 0 deletions

diff --git a/Python/random.c b/Python/random.c
index 511070add0..6fdce64bca 100644
--- a/Python/random.c
+++ b/Python/random.c
@@ -331,6 +331,7 @@ dev_urandom(char *buffer, Py_ssize_t size, int raise)
 
             if (n <= 0) {
                 /* stop on error or if read(size) returned 0 */
+                close(fd);
                 return -1;
             }