pipewire/spa/plugins/v4l2
Wim Taymans 695f25600b security: add missing O_CLOEXEC flag to V4L2 device open
File and Resource Handling: Medium

The V4L2 device file descriptor was opened without the O_CLOEXEC flag.
If a child process is subsequently spawned (e.g., via fork+exec), the
video device fd would be inherited, potentially allowing the child
process unauthorized access to the camera device.

Fixed by adding O_CLOEXEC to the open() flags.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-28 12:56:40 +02:00
..
meson.build v4l2: use dll to track rate difference 2024-11-26 17:14:26 +01:00
v4l2-device.c v4l2: use 0x as the prefix for hex values 2026-03-09 13:50:38 +01:00
v4l2-source.c spa: use safe IO_Control parsing 2025-07-31 11:23:30 +02:00
v4l2-udev.c *: unify config.h handling 2025-05-30 10:24:13 +00:00
v4l2-utils.c security: add missing O_CLOEXEC flag to V4L2 device open 2026-04-28 12:56:40 +02:00
v4l2.c *: unify config.h handling 2025-05-30 10:24:13 +00:00
v4l2.h spa: remove unnecessary indirection for some spa_log_topics 2023-10-06 13:08:24 +00:00