projects / platform / core / appfw / app-installers.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ba3e3ac) | patch
Fix static analysis issue 85/140285/1
authorJunghyun Yeon <jungh.yeon@samsung.com>
Mon, 24 Jul 2017 10:06:12 +0000 (19:06 +0900)
committerJunghyun Yeon <jungh.yeon@samsung.com>
Mon, 24 Jul 2017 10:06:12 +0000 (19:06 +0900)
commitc426486eb8c1adc9aa2ba37b304ac58b5f104c14
treea4905169bfebcb37fd9171f1fba15671d56b6b8atree | snapshot
parentba3e3acf64969538c3953c867710f02e9606a969commit | diff
Fix static analysis issue

- Attacker could hijack contents of package by watching creation of
  temporary directory for installation and make symbolic link which points
  other file inside of it.
- Adding 'x' option when open package using fopen() will prevent it.

Change-Id: Ic0b5c87fd86c6ce9c6cf68e75e12c9de4227e8bc
Signed-off-by: Junghyun Yeon <jungh.yeon@samsung.com>
src/common/utils/file_util.cc diff | blob | history
Domain: App Framework / Application Installer;