Fix file descriptor leak in Formula#system