eina: fix potential security issue.

This also follow the behavior of eina_file_mkstemp.

Signed-off-by: Cedric BAIL <cedric@osg.samsung.com>

diff --git a/src/lib/eina/eina_util.c b/src/lib/eina/eina_util.c
index 886fe3b..b1d05ae 100644 (file)
--- a/src/lib/eina/eina_util.c
+++ b/src/lib/eina/eina_util.c
@@ -85,8 +85,13 @@ eina_environment_tmp_get(void)
 
    return tmp;
 #else
-   tmp = getenv("TMPDIR");
-   if (!tmp) tmp = getenv("XDG_RUNTIME_DIR");
+# if defined(HAVE_GETUID) && defined(HAVE_GETEUID)
+   if (getuid() == geteuid())
+# endif
+     {
+        tmp = getenv("TMPDIR");
+       if (!tmp) tmp = getenv("XDG_RUNTIME_DIR");
+     }
    if (!tmp) tmp = "/tmp";
 
    return tmp;