From 70aa965c2678f91e45986f50a89588339a904f04 Mon Sep 17 00:00:00 2001
From: Melanie Thielker
Date: Wed, 2 Jun 2010 01:04:17 +0200
Subject: Add a forgotten security check. Make the new functions only work on
 prims owned by the host prim owner.

---
 OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'OpenSim')

diff --git a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
index 481a3e6..3c2ef34 100644
--- a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
+++ b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
@@ -10268,6 +10268,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return;
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return;
+
             SetPrimParams(obj, rules);
         }
 
@@ -10277,6 +10280,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return new LSL_List();
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return new LSL_List();
+
             return GetLinkPrimitiveParams(obj, rules);
         }
     }
-- 
cgit v1.1