to be paranoid - ensure umask for mkstemp allows no other uids oir

grps access.



SVN revision: 68910
This commit is contained in:
Carsten Haitzler 2012-03-07 09:05:47 +00:00
parent a6770d97ff
commit d38630875c
1 changed files with 3 additions and 0 deletions

View File

@ -224,8 +224,10 @@ _create_tmpf(Evas_Object *obj, void *data, int size, char *format __UNUSED__)
char buf[4096];
void *dst;
int fd = -1;
mode_t pmode;
o = (Evas_Object_Image *)(obj->object_data);
pmode = umask(S_IRGRP | S_IWGRP | S_IXGRP | S_IROTH | S_IWOTH | S_IXOTH);
#ifdef __linux__
snprintf(buf, sizeof(buf), "/dev/shm/.evas-tmpf-%i-%p-%i-XXXXXX",
(int)getpid(), data, (int)size);
@ -237,6 +239,7 @@ _create_tmpf(Evas_Object *obj, void *data, int size, char *format __UNUSED__)
(int)getpid(), data, (int)size);
fd = mkstemp(buf);
}
umask(pmode);
if (fd < 0) return;
if (ftruncate(fd, size) < 0)
{