tree d23fded5bcbf9743c0fefe205178a0478f80615c
parent d4ebde69e722ce079f885e023d7e2dc14ea7a5f7
author Ian McKellar <ianloic@google.com> 1635288821 +0000
committer commit-bot@chromium.org <commit-bot@chromium.org> 1635288821 +0000

Fix a use-after free in Fuchsia process launching

The fdio_flat_namespace_t returned by fdio_ns_export holds memory for
the paths of the prefixes. If this is freed then the fdio_spawn_action_t
entries point to freed memory.

Now we explicitly copy the prefix path strings and move the handles out.

TEST=internal testing

Change-Id: If8e1e0ded86003a618610a98dd571826a6ca40c9
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/218087
Reviewed-by: Zach Anderson <zra@google.com>
Commit-Queue: Zach Anderson <zra@google.com>
Auto-Submit: Ian McKellar <ianloic@google.com>