tags 326950 + patch thanks In src/cookies.c , there is a function called Cookies_fopen() , which does an fopen() with mode "r+" on a cookies file. At the end of this function, it does a "set close on exec" by fcntl(fileno(F_in), F_SETFD, FD_CLOEXEC | fcntl(fileno(F_in), F_GETFD));
Since the file was owned by root.root, the fopen fails, so the filehandle F_in was null. The fix is to check if the filehandle F_in is valid before calling fcntl. If it is invalid, fcntl will seg fault.
dillo.cookiepatch
Description: Binary data
