From: Heeyong Song <heeyong.song@samsung.com>
Date: Fri, 21 Jul 2017 06:27:45 +0000 (+0900)
Subject: Fix security SVACE issue
X-Git-Tag: dali_1.2.50~2^2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;ds=inline;h=c5a21d0a3c0e048ae882ad5c727788c90dd83563;p=platform%2Fcore%2Fuifw%2Fdali-adaptor.git

Fix security SVACE issue

Change-Id: I44700728866ffef5728bc45433455059a9eb882f
---

diff --git a/adaptors/base/fps-tracker.cpp b/adaptors/base/fps-tracker.cpp
index 7c68e47..6ae5a4d 100644
--- a/adaptors/base/fps-tracker.cpp
+++ b/adaptors/base/fps-tracker.cpp
@@ -21,6 +21,7 @@
 // EXTERNAL INCLUDES
 #include <cstdio>
 #include <cmath>
+#include <sys/stat.h>
 
 // INTERNAL INCLUDES
 #include <base/environment-options.h>
@@ -82,6 +83,19 @@ void FpsTracker::OutputFPSRecord()
   float fps = mFrameCount / mElapsedTime;
   DALI_LOG_FPS("Frame count %.0f, elapsed time %.1fs, FPS: %.2f\n", mFrameCount, mElapsedTime, fps );
 
+  struct stat fileStat;
+
+  // Check file path
+  if( lstat( DALI_TEMP_UPDATE_FPS_FILE, &fileStat ) != 0 )
+  {
+    return;
+  }
+
+  if( !S_ISREG( fileStat.st_mode ) )
+  {
+    return;
+  }
+
   // Dumps out the frame rate.
   FILE* outfile = fopen( DALI_TEMP_UPDATE_FPS_FILE, "w" );
   if( outfile )