> To be more precise on one bit, you can't get fd=1026 without having had at least 1027 open at some point in the past.

Of course you can.

    dup2(0,1026)