pipewire/spa/plugins/v4l2
Wim Taymans 695f25600b security: add missing O_CLOEXEC flag to V4L2 device open
File and Resource Handling: Medium

The V4L2 device file descriptor was opened without the O_CLOEXEC flag.
If a child process is subsequently spawned (e.g., via fork+exec), the
video device fd would be inherited, potentially allowing the child
process unauthorized access to the camera device.

Fixed by adding O_CLOEXEC to the open() flags.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-28 12:56:40 +02:00
..
meson.build
v4l2-device.c
v4l2-source.c
v4l2-udev.c
v4l2-utils.c security: add missing O_CLOEXEC flag to V4L2 device open 2026-04-28 12:56:40 +02:00
v4l2.c
v4l2.h