X-Git-Url: http://git.tuebingen.mpg.de/?p=paraslash.git;a=blobdiff_plain;f=crypt.c;h=b6a54604f167babf9c05712658233d713c229be0;hp=1172ddc333fdb12f2010c11785c39f773561e777;hb=edeb499676e6d042ef1a913914a9fcb45a8cadde;hpb=153bf6c6f74b8c951a8b2a13b0224f460148531e

diff --git a/crypt.c b/crypt.c
index 1172ddc3..b6a54604 100644
--- a/crypt.c
+++ b/crypt.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2005-2009 Andre Noll <maan@systemlinux.org>
+ * Copyright (C) 2005-2010 Andre Noll <maan@systemlinux.org>
  *
  * Licensed under the GPL v2. For licencing details see COPYING.
  */
@@ -65,11 +65,29 @@ void init_random_seed_or_die(void)
 	srandom(seed);
 }
 
+static int check_key_file(const char *file, int private)
+{
+	struct stat st;
+
+	if (stat(file, &st) != 0)
+		return -ERRNO_TO_PARA_ERROR(errno);
+	if (private != LOAD_PRIVATE_KEY)
+		return 0;
+	if ((st.st_uid == getuid()) && (st.st_mode & 077) != 0)
+		return -E_KEY_PERM;
+	return 1;
+}
+
 static EVP_PKEY *load_key(const char *file, int private)
 {
 	BIO *key;
 	EVP_PKEY *pkey = NULL;
+	int ret = check_key_file(file, private);
 
+	if (ret < 0) {
+		PARA_ERROR_LOG("%s\n", para_strerror(-ret));
+		return NULL;
+	}
 	key = BIO_new(BIO_s_file());
 	if (!key)
 		return NULL;
@@ -202,7 +220,7 @@ int rc4_send_bin_buffer(struct rc4_context *rc4c, const char *buf, size_t len)
 	unsigned char *tmp;
 
 	assert(len);
-	tmp = para_malloc(len);
+	tmp = para_malloc(len + 8);
 	RC4(&rc4c->send_key, len, (const unsigned char *)buf, tmp);
 	ret = write_all(rc4c->fd, (char *)tmp, &len);
 	free(tmp);