d2d-conv-manager: fix svace issue 33/98833/1
authorHongkuk, Son <hongkuk.son@samsung.com>
Mon, 21 Nov 2016 04:04:38 +0000 (13:04 +0900)
committerHongkuk Son <hongkuk.son@samsung.com>
Mon, 21 Nov 2016 04:06:13 +0000 (20:06 -0800)
PROC_USE.VULNERABLE - WID 16601022

Signed-off-by: Hongkuk, Son <hongkuk.son@samsung.com>
Change-Id: If85dca96411db99560d604abaeecf0647b0848c7

daemon/access_control/ACLManager.cpp

index c1690f7..04d4fa9 100644 (file)
@@ -57,11 +57,12 @@ ACLResult conv::acl_manager::PasscodeChecker(char *input_passcode)
 void CreatePasscode()
 {
        char token[64] = "01234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+       unsigned int time_seed = (unsigned int)time(NULL);
 
-       srand((unsigned int)time(NULL));
+       srand(time_seed);
 
        for (int i = 0; i < 4; i++) {
-               int random_num = rand() % 63;
+               int random_num = rand_r(&time_seed) % 63;
                passcode[i] = token[random_num];
        }
 
@@ -581,4 +582,4 @@ int conv::acl_manager::handleRequest(conv::Request *requestObj)
        }
 
        return CONV_ERROR_NONE;
-}
\ No newline at end of file
+}