From dcca51525ab4994cb8c1232e9698a534109288db Mon Sep 17 00:00:00 2001
From: Zdenek Prikryl <zprikryl@redhat.com>
Date: Tue, 30 Jun 2009 09:14:12 +0200
Subject: fixed security issue

User can read only his debugdump directories
---
 src/Hooks/CCpp.cpp | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

(limited to 'src/Hooks/CCpp.cpp')

diff --git a/src/Hooks/CCpp.cpp b/src/Hooks/CCpp.cpp
index 1d895c2..2a7e60c 100644
--- a/src/Hooks/CCpp.cpp
+++ b/src/Hooks/CCpp.cpp
@@ -127,7 +127,7 @@ int daemon_is_ok()
 int main(int argc, char** argv)
 {
     const char* program_name = argv[0];
-    if (argc < 3)
+    if (argc < 4)
     {
         fprintf(stderr, "Usage: %s: <dddir> <pid> <signal> <uid>\n",
                 program_name);
@@ -172,10 +172,9 @@ int main(int argc, char** argv)
         }
 
         snprintf(path, sizeof(path), "%s/ccpp-%ld-%s", dddir, time(NULL), pid);
-        dd.Create(path);
+        dd.Create(path, uid);
         dd.SaveText(FILENAME_ANALYZER, "CCpp");
         dd.SaveText(FILENAME_EXECUTABLE, executable);
-        dd.SaveText(FILENAME_UID, uid);
         dd.SaveText(FILENAME_CMDLINE, cmdline);
         dd.SaveText(FILENAME_REASON, std::string("Process was terminated by signal ") + signal);
 
-- 
cgit