Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4ae77160 authored by Nick Kralevich's avatar Nick Kralevich
Browse files

do more checks on packages.list 

Change-Id: I16d6eab5e674c860be915fde2da7877994bed314
parent a8185a62

run-as/package.c

+10 −0
Original line number Diff line number Diff line
@@ -89,6 +89,16 @@ map_file(const char* filename, size_t* filesize) 
    if (ret < 0)

        goto EXIT;



    /* Ensure that the file is owned by the system user */

    if ((st.st_uid != AID_SYSTEM) || (st.st_gid != AID_SYSTEM)) {

        goto EXIT;

    }



    /* Ensure that the file has sane permissions */

    if ((st.st_mode & S_IWOTH) != 0) {

        goto EXIT;

    }



    /* Ensure that the size is not ridiculously large */

    length = (size_t)st.st_size;

    if ((off_t)length != st.st_size) {