Add a forgotten security check. Make the new functions only work on prims

owned by the host prim owner.

1 files changed, 6 insertions, 0 deletions

diff --git a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
index a8a3595..5400a4f 100644
--- a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
+++ b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
@@ -9795,6 +9795,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return;
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return;
+
             SetPrimParams(obj, rules);
         }
 
@@ -9804,6 +9807,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return new LSL_List();
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return new LSL_List();
+
             return GetLinkPrimitiveParams(obj, rules);
         }
     }