From e77f9d95d36e27a2b490501c5ae4921d7d7d2958 Mon Sep 17 00:00:00 2001
From: Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com>
Date: Tue, 22 Sep 2015 19:52:35 +0900
Subject: [PATCH] nghttpx: Set CLOEXEC for ipc fds

---
 src/shrpx.cc | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/shrpx.cc b/src/shrpx.cc
index 006a90bb..52fbf0b1 100644
--- a/src/shrpx.cc
+++ b/src/shrpx.cc
@@ -689,8 +689,11 @@ int event_loop() {
     return -1;
   }
 
-  util::make_socket_nonblocking(ssv.ipc_fd[0]);
-  util::make_socket_nonblocking(ssv.ipc_fd[1]);
+  for (int i = 0; i < 2; ++i) {
+    auto fd = ssv.ipc_fd[i];
+    util::make_socket_nonblocking(fd);
+    util::make_socket_closeonexec(fd);
+  }
 
   auto loop = EV_DEFAULT;