i2p/haiku-beta6
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel/team: Add permissions checks in get_extended_team_info.

Browse Source
This commit is contained in:
Augustin Cavalier
2025-07-15 18:08:00 -04:00
parent 9626cf86ec
commit 2b79f7b494
1 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/system/kernel/team.cpp
+10 -6
View File
@@ -4456,6 +4456,15 @@ _user_get_extended_team_info(team_id teamID, uint32 flags, void* buffer,
return B_BAD_ADDRESS; return B_BAD_ADDRESS;
} }
Team* team = Team::Get(teamID);
if (team == NULL)
return B_BAD_TEAM_ID;
BReference<Team> teamReference(team, true);
uid_t uid = geteuid();
if (uid != 0 && uid != team->effective_uid)
return B_NOT_ALLOWED;
KMessage info; KMessage info;
if ((flags & B_TEAM_INFO_BASIC) != 0) { if ((flags & B_TEAM_INFO_BASIC) != 0) {
@@ -4473,12 +4482,7 @@ _user_get_extended_team_info(team_id teamID, uint32 flags, void* buffer,
io_context* ioContext; io_context* ioContext;
{ {
// get the team structure TeamLocker teamLocker(team);
Team* team = Team::GetAndLock(teamID);
if (team == NULL)
return B_BAD_TEAM_ID;
BReference<Team> teamReference(team, true);
TeamLocker teamLocker(team, true);
// copy the data // copy the data
teamClone.id = team->id; teamClone.id = team->id;