--- IO-FDPass/Changes 2021/01/03 23:54:05 1.12 +++ IO-FDPass/Changes 2022/09/06 10:49:13 1.13 @@ -1,5 +1,10 @@ Revision history for Perl extension IO::FDPass + - hardening: limit cmsg->cmsg_len to controllen, as some buggy OSes + allow buffer overruns otherwise. + - hardening: do not leak fds on fdpass protocol failures. + - hardening: close extra fd's sent by non-compliant sender. + 1.3 Mon Jan 4 00:46:36 CET 2021 - do not leak memory on unsuccessful recv (based on patch by Eric Wong).