Fix panic hook leaking after each new sandbox

Signed-off-by: Ludvig Liljenberg <[email protected]>

Author: ludfjig

src/hyperlight_host/src/signal_handlers/mod.rs

@@ -14,6 +14,8 @@ See the License for the specific language governing permissions and
 limitations under the License.
 */
 
+use std::sync::Once;
+
 use libc::c_int;
 
 use crate::sandbox::SandboxConfiguration;
@@ -35,20 +37,23 @@ pub(crate) fn setup_signal_handlers(config: &SandboxConfiguration) -> crate::Res
         )
         .map_err(crate::HyperlightError::VmmSysError)?;
 
-        let original_hook = std::panic::take_hook();
-        // Set a custom panic hook that checks for "DisallowedSyscall"
-        std::panic::set_hook(Box::new(move |panic_info| {
-            // Check if the panic payload matches "DisallowedSyscall"
-            if let Some(crate::HyperlightError::DisallowedSyscall) = panic_info
-                .payload()
-                .downcast_ref::<crate::HyperlightError>(
-            ) {
-                // Do nothing to avoid superfluous syscalls
-                return;
-            }
-            // If not "DisallowedSyscall", use the original hook
-            original_hook(panic_info);
-        }));
+        static PANIC_HOOK_INIT: Once = Once::new();
+        PANIC_HOOK_INIT.call_once(|| {
+            let original_hook = std::panic::take_hook();
+            // Set a custom panic hook that checks for "DisallowedSyscall"
+            std::panic::set_hook(Box::new(move |panic_info| {
+                // Check if the panic payload matches "DisallowedSyscall"
+                if let Some(crate::HyperlightError::DisallowedSyscall) = panic_info
+                    .payload()
+                    .downcast_ref::<crate::HyperlightError>(
+                ) {
+                    // Do nothing to avoid superfluous syscalls
+                    return;
+                }
+                // If not "DisallowedSyscall", use the original hook
+                original_hook(panic_info);
+            }));
+        });
     }
     vmm_sys_util::signal::register_signal_handler(
         libc::SIGRTMIN() + config.get_interrupt_vcpu_sigrtmin_offset() as c_int,