diff options
author | Melanie Thielker | 2010-07-15 20:03:08 +0200 |
---|---|---|
committer | Diva Canto | 2010-07-20 14:52:25 -0700 |
commit | df55e5295fe029a9a7d23f71263cbf72c8921884 (patch) | |
tree | c5ea67b534a225b1e1c99f22dac015f51cb19a1d /OpenSim/Region/Framework/Scenes/SceneObjectPart.cs | |
parent | Relaxed the ultra-conservative lock on m_items. Needs testing under linux and... (diff) | |
download | opensim-SC_OLD-df55e5295fe029a9a7d23f71263cbf72c8921884.zip opensim-SC_OLD-df55e5295fe029a9a7d23f71263cbf72c8921884.tar.gz opensim-SC_OLD-df55e5295fe029a9a7d23f71263cbf72c8921884.tar.bz2 opensim-SC_OLD-df55e5295fe029a9a7d23f71263cbf72c8921884.tar.xz |
Fix a few permissions vulnerability. Owners could cause permissions
escalation on items contained in prims using a hacked viewer
Diffstat (limited to '')
-rw-r--r-- | OpenSim/Region/Framework/Scenes/SceneObjectPart.cs | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/OpenSim/Region/Framework/Scenes/SceneObjectPart.cs b/OpenSim/Region/Framework/Scenes/SceneObjectPart.cs index 59fd805..6e29312 100644 --- a/OpenSim/Region/Framework/Scenes/SceneObjectPart.cs +++ b/OpenSim/Region/Framework/Scenes/SceneObjectPart.cs | |||
@@ -4137,6 +4137,13 @@ namespace OpenSim.Region.Framework.Scenes | |||
4137 | case 16: | 4137 | case 16: |
4138 | _nextOwnerMask = ApplyMask(_nextOwnerMask, set, mask) & | 4138 | _nextOwnerMask = ApplyMask(_nextOwnerMask, set, mask) & |
4139 | baseMask; | 4139 | baseMask; |
4140 | // Prevent the client from creating no mod, no copy | ||
4141 | // objects | ||
4142 | if ((_nextOwnerMask & (uint)PermissionMask.Copy) == 0) | ||
4143 | _nextOwnerMask |= (uint)PermissionMask.Transfer; | ||
4144 | |||
4145 | _nextOwnerMask |= (uint)PermissionMask.Move; | ||
4146 | |||
4140 | break; | 4147 | break; |
4141 | } | 4148 | } |
4142 | SendFullUpdateToAllClients(); | 4149 | SendFullUpdateToAllClients(); |