Remove the signal array stack as our pipe handling should be secure enough now. Also, move the normalize close_on_exec and setting non block.

1 files changed, 2 insertions, 1 deletions

diff --git a/bpf.c b/bpf.c
index ed9c4a1d..3cbfc40c 100644
--- a/bpf.c
+++ b/bpf.c
@@ -121,7 +121,8 @@ open_socket(struct interface *iface, int protocol)
 	}
 	if (ioctl(fd, BIOCSETF, &pf) == -1)
 		goto eexit;
-	close_on_exec(fd);
+	if (set_cloexec(fd) == -1)
+		goto eexit;
 	if (*fdp != -1)
 		close(*fdp);
 	*fdp = fd;