From: Ronald Chan <ronalchn@gmail.com>
Date: Wed, 20 Nov 2013 09:25:36 +0000 (+1300)
Subject: Isolate: Close metafile to prevent box_inside writing false data to it
X-Git-Url: http://mj.ucw.cz/gitweb/?a=commitdiff_plain;h=88593cee137328a93c978e26bad6b33ffabc9a7b;p=moe.git

Isolate: Close metafile to prevent box_inside writing false data to it

See https://github.com/ronalchn/isolate-cheater for an exploit.
---

diff --git a/isolate/isolate.c b/isolate/isolate.c
index 687edbf..2164c90 100644
--- a/isolate/isolate.c
+++ b/isolate/isolate.c
@@ -1244,6 +1244,7 @@ box_inside(void *arg)
   char **args = arg;
   write_errors_to_fd = error_pipes[1];
   close(error_pipes[0]);
+  meta_close();
 
   cg_enter();
   setup_root();