Description of problem:

One of my systems created endless, high frequent log messages (up to
6000 messages per second) like

| Aug  4 08:08:53 ... Unable to set close-on-exec on connfd (Bad file descriptor)
| Aug  4 08:08:53 ... Unable to set close-on-exec on connfd (Bad file descriptor)

This is caused by sendmail-8.14.3-milterfdleaks.patch which uses
'connfd' without validating it:

|       connfd = accept(listenfd, (struct sockaddr *) &cliaddr,
|                       &clilen);
|  ...
| +     if ((fdflags = fcntl(connfd, F_GETFD, 0)) == -1 ||
| +         fcntl(connfd, F_SETFD, fdflags | FD_CLOEXEC) == -1)
| +     {
| +             smi_log(SMI_LOG_WARN,
| +                     "%s: Unable to set close-on-exec on connfd (%s)",
| +                     smfi->xxfi_name, sm_errstring(errno));


There is an (unknown) underlying problem which is unrelated to this
patch.  But the fcntl() operations should not be executed before
validating 'connfd'.  Handling of bad 'connfd' descriptor is done
later in the milter code so that no further actions should be done in
this case by the patch.


Version-Release number of selected component (if applicable):

sendmail-8.14.4-8.el6.x86_64