vcl: fix some risk after fork()