From aa5a346a68415971a294af73c20d57a1fcd32c05 Mon Sep 17 00:00:00 2001
From: Melanie Thielker
Date: Wed, 2 Jun 2010 01:04:17 +0200
Subject: Add a forgotten security check. Make the new functions only work on
 prims owned by the host prim owner.

---
 OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'OpenSim/Region/ScriptEngine/Shared/Api/Implementation')

diff --git a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
index a8a3595..5400a4f 100644
--- a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
+++ b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
@@ -9795,6 +9795,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return;
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return;
+
             SetPrimParams(obj, rules);
         }
 
@@ -9804,6 +9807,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return new LSL_List();
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return new LSL_List();
+
             return GetLinkPrimitiveParams(obj, rules);
         }
     }
-- 
cgit v1.1