Changeset 50522b5 for global.c

Timestamp:

Jul 16, 2010, 7:43:42 PM (14 years ago)

Author:

Nelson Elhage <nelhage@mit.edu>

Branches:

master, release-1.10, release-1.7, release-1.8, release-1.9

Children:

26ad412

Parents:

d12a8c7

git-author:

Nelson Elhage <nelhage@mit.edu> (07/15/10 23:38:45)

git-committer:

Nelson Elhage <nelhage@mit.edu> (07/16/10 19:43:42)

Message:

Open the debug file using O_EXCL and an explicit mode.

We write potentially sensitive data out to the debug log, so we should protect
it.

Reported-by: Geoffrey Thomas <geofft@mit.edu>

File:

• global.c (modified) (1 diff)

global.c

@@ -1081 +1081 @@
   if (g->debug_file == NULL ||
       (open_file && strcmp(filename, open_file) != 0)) {
+    int fd;
+
     if (g->debug_file)
       fclose(g->debug_file);
-    g->debug_file = fopen(filename, "a");
+
+    g->debug_file = NULL;
+
+    fd = open(filename, O_CREAT|O_WRONLY|O_EXCL, 0600);
+    if (fd >= 0)
+      g->debug_file = fdopen(fd, "a");
 
     owl_free(open_file);