Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
net: ipStackCapabilities.probe creates sockets that can escape into child process #22349
Perhaps I am mistake. But ipStackCapabilities.probe calls socketFunc (which is just a syscall.Socket). Returned socket is inheritable by child process on Windows, so it can escape, if we call Windows CreateProcess at the same time.
Maybe this is expected, but I decided to report. Just in case.