mirror of
https://github.com/openai/codex.git
synced 2026-04-24 14:45:27 +00:00
Addresses #11555 Problem: macOS malloc stack-logging diagnostics could leak into the TUI composer and get misclassified as pasted user input. Solution: Strip `MallocStackLogging*` and `MallocLogFile*` during macOS pre-main hardening and document the additional env cleanup.
codex-process-hardening
This crate provides pre_main_hardening(), which is designed to be called pre-main() (using #[ctor::ctor]) to perform various process hardening steps, such as
- disabling core dumps
- disabling ptrace attach on Linux and macOS
- removing dangerous or noisy environment variables such as
LD_PRELOAD,DYLD_*, and macOS malloc stack-logging controls