Don't leak tdb file descriptor to scripts. Bug reported by Steve Grubb.

1 files changed, 1 insertions, 0 deletions

diff --git a/pppd/tdb.c b/pppd/tdb.c
index c6498d6..024b502 100644
--- a/pppd/tdb.c
+++ b/pppd/tdb.c
@@ -1134,6 +1134,7 @@ TDB_CONTEXT *tdb_open(char *name, int hash_size, int tdb_flags,
             if (tdb.fd == -1) {
 		goto fail;
             }
+	    (void) fcntl(tdb.fd, F_SETFD, FD_CLOEXEC);
         }
 
 	/* ensure there is only one process initialising at once */