mirror of
https://github.com/nodejs/node.git
synced 2024-11-25 08:19:38 +01:00
b5f25a963c
Check that stdin, stdout and stderr map to open file descriptors and remap them to /dev/null if that isn't the case. Protects against information leaks or worse when io.js is started with closed stdio file descriptors. PR-URL: https://github.com/iojs/io.js/pull/875 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Vladimir Kurchatkin <vladimir.kurchatkin@gmail.com>
25 lines
676 B
JavaScript
25 lines
676 B
JavaScript
var common = require('../common');
|
|
var assert = require('assert');
|
|
var spawn = require('child_process').spawn;
|
|
|
|
if (process.platform === 'win32') {
|
|
console.log('Skipping test, platform not supported.');
|
|
return;
|
|
}
|
|
|
|
if (process.argv[2] === 'child') {
|
|
process.stdout.write('stdout', function() {
|
|
process.stderr.write('stderr', function() {
|
|
process.exit(42);
|
|
});
|
|
});
|
|
}
|
|
|
|
// Run the script in a shell but close stdout and stderr.
|
|
var cmd = '"' + process.execPath + '" "' + __filename + '" child 1>&- 2>&-';
|
|
var proc = spawn('/bin/sh', ['-c', cmd], { stdio: 'inherit' });
|
|
|
|
proc.on('exit', common.mustCall(function(exitCode) {
|
|
assert.equal(exitCode, 42);
|
|
}));
|