0
@@ -17,6 +17,7 @@
0
 #  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
0
 
0
 require 'socket'
0
+require 'set'
0
 require 'timeout'
0
 require 'passenger/message_channel'
0
 require 'passenger/utils'
0
@@ -113,7 +114,17 @@ class AbstractServer
0
         STDOUT.sync = true
0
         STDERR.sync = true
0
         @parent_socket.close
0
-				NativeSupport.close_all_file_descriptors([0, 1, 2, @child_socket.fileno])
0
+				
0
+				# During Passenger's early days, we used to close file descriptors based
0
+				# on a white list of file descriptors. That proved to be way too fragile:
0
+				# too many file descriptors are being left open even though they shouldn't
0
+				# be. So now we close file descriptors based on a black list.
0
+				file_descriptors_to_close = [0, 1, 2, @child_socket.fileno]
0
+				NativeSupport.close_all_file_descriptors(file_descriptors_to_close)
0
+				# In addition to closing the file descriptors, one must also close
0
+				# the associated IO objects. This is to prevent IO.close from
0
+				# double-closing already closed file descriptors.
0
+				close_all_io_objects_for_fds(Set.new(file_descriptors_to_close))
0
         
0
         # At this point, RubyGems might have open file handles for which
0
         # the associated file descriptors have just been closed. This can

0
@@ -81,6 +81,19 @@ protected
0
     groupname && Etc.getgrnam(groupname)
0
   end
0
   
0
+	def close_all_io_objects_for_fds(file_descriptors_to_close)
0
+		ObjectSpace.each_object do |o|
0
+			if o.is_a?(IO)
0
+				begin
0
+					if o.closed? && file_descriptors_to_close.include?(o.fileno)
0
+						o.close
0
+					end
0
+				rescue
0
+				end
0
+			end
0
+		end
0
+	end
0
+	
0
   def marshal_exception(exception)
0
     data = {
0
       :message => exception.message,