Shuffle file descriptors as necessary to avoid clash with notify fd.

diff --git a/src/run-child-proc.cc b/src/run-child-proc.cc
index 33d189d015e4803610b83ac2683adacefeb5ac07..fdf475055d056411815ee599ac585861030a0e13 100644 (file)
--- a/src/run-child-proc.cc
+++ b/src/run-child-proc.cc
@@ -28,6 +28,18 @@ static int move_fd(int fd, int dest)
     return 0;
 }
 
+// Move a file descriptor to another, freeing up the original descriptor so that it can be used
+// for some reserved purpose.
+static int move_reserved_fd(int *fd, int min_fd)
+{
+    int new_fd = fcntl(*fd, F_DUPFD_CLOEXEC, min_fd);
+    if (new_fd != -1) {
+        close(*fd);
+        *fd = new_fd;
+    }
+    return new_fd;
+}
+
 void base_process_service::run_child_proc(const char * const *args, const char *working_dir,
         const char *logfile, bool on_console, int wpipefd, int csfd, int socket_fd,
         int notify_fd, int force_notify_fd, const char *notify_var,
@@ -63,9 +75,25 @@ void base_process_service::run_child_proc(const char * const *args, const char *
 
     int minfd = (socket_fd == -1) ? 3 : 4;
 
-    // Move wpipefd/csfd/notifyfd to another fd if necessary
+    // Move wpipefd/csfd/socket_fd to another fd if necessary:
+    if (wpipefd == force_notify_fd) {
+        if (move_reserved_fd(&wpipefd, minfd) == -1) {
+            goto failure_out;
+        }
+    }
+    if (csfd == force_notify_fd) {
+        if (move_reserved_fd(&csfd, minfd) == -1) {
+            goto failure_out;
+        }
+    }
+    if (socket_fd == force_notify_fd) {
+        // Note that we might move this again later
+        if (move_reserved_fd(&socket_fd, 0) == -1) {
+            goto failure_out;
+        }
+    }
 
-    // first allocate the forced notification fd, if specified:
+    // allocate the forced notification fd, if specified:
     if (force_notify_fd != -1) {
         if (notify_fd != force_notify_fd) {
             if (dup2(notify_fd, force_notify_fd) == -1) {
@@ -76,6 +104,7 @@ void base_process_service::run_child_proc(const char * const *args, const char *
         }
     }
 
+    // Make sure we have the fds for stdin/out/err (and pre-opened socket) available:
     if (wpipefd < minfd) {
         wpipefd = fcntl(wpipefd, F_DUPFD_CLOEXEC, minfd);
         if (wpipefd == -1) goto failure_out;
@@ -91,7 +120,7 @@ void base_process_service::run_child_proc(const char * const *args, const char *
         if (notify_fd == -1) goto failure_out;
     }
 
-    // Set up notify-fd variable
+    // Set up notify-fd variable:
     if (notify_var != nullptr && *notify_var != 0) {
         // We need to do an allocation: the variable name length, '=', and space for the value,
         // and nul terminator:
@@ -103,7 +132,7 @@ void base_process_service::run_child_proc(const char * const *args, const char *
         if (putenv(var_str)) goto failure_out;
     }
 
-    // Set up Systemd-style socket activation
+    // Set up Systemd-style socket activation:
     if (socket_fd != -1) {
         // If we passing a pre-opened socket, it has to be fd number 3. (Thanks, Systemd).
         if (dup2(socket_fd, 3) == -1) goto failure_out;