The posix_spawn_file_actions_addopen function in glibc before 220 does not copy its path argument in accordance with the POSIX specification which allows contextdependent attackers to trigger useafterfree vulnerabilities

Please fix the punctuation.
The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities.