From ed034738571971aff9bf3cda8461e10e1189df60 Mon Sep 17 00:00:00 2001
From: Robert Gemmell <robbie@apache.org>
Date: Tue, 20 Oct 2009 14:45:36 +0000
Subject: QPID-2041: remove use of FileUtils.copyCheckedEx for security
 reasons, generate new file in same filesystem as existing file to avoid
 copying between filesystems

git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@827587 13f79535-47bb-0310-9956-ffa450edef68
---
 .../Base64MD5PasswordFilePrincipalDatabase.java    | 45 ++++++++++++----------
 1 file changed, 25 insertions(+), 20 deletions(-)

(limited to 'java')

diff --git a/java/broker/src/main/java/org/apache/qpid/server/security/auth/database/Base64MD5PasswordFilePrincipalDatabase.java b/java/broker/src/main/java/org/apache/qpid/server/security/auth/database/Base64MD5PasswordFilePrincipalDatabase.java
index cd4eb0bec7..581eeabbc3 100644
--- a/java/broker/src/main/java/org/apache/qpid/server/security/auth/database/Base64MD5PasswordFilePrincipalDatabase.java
+++ b/java/broker/src/main/java/org/apache/qpid/server/security/auth/database/Base64MD5PasswordFilePrincipalDatabase.java
@@ -40,6 +40,7 @@ import java.util.HashMap;
 import java.util.LinkedList;
 import java.util.List;
 import java.util.Map;
+import java.util.Random;
 import java.util.concurrent.locks.ReentrantLock;
 import java.util.regex.Pattern;
 
@@ -428,7 +429,15 @@ public class Base64MD5PasswordFilePrincipalDatabase implements PrincipalDatabase
 
             BufferedReader reader = null;
             PrintStream writer = null;
-            File tmp = File.createTempFile(_passwordFile.getName(), ".tmp");
+            
+            Random r = new Random();
+            File tmp;
+            do
+            {
+                tmp = new File(_passwordFile.getPath() + r.nextInt() + ".tmp");
+            }
+            while(tmp.exists());
+            
             tmp.deleteOnExit();
 
             try
@@ -528,30 +537,26 @@ public class Base64MD5PasswordFilePrincipalDatabase implements PrincipalDatabase
                 old.delete();
             }
             
-            try
-            {
-                if(!_passwordFile.renameTo(old))
-                {
-                    FileUtils.copyCheckedEx(_passwordFile, old);
-                }
-            }
-            catch (IOException e)
+            if(!_passwordFile.renameTo(old))
             {
-                _logger.error("Could not backup the existing password file: " +e);
-                throw new IOException("Could not backup the existing password file: " + e);
+                //unable to rename the existing file to the backup name 
+                _logger.error("Could not backup the existing password file");
+                throw new IOException("Could not backup the existing password file");
             }
-            
-            try
+
+            if(!tmp.renameTo(_passwordFile))
             {
-                if(!tmp.renameTo(_passwordFile))
+                //failed to rename the new file to the required filename
+                
+                if(!old.renameTo(_passwordFile))
                 {
-                    FileUtils.copyCheckedEx(tmp, _passwordFile);
+                    //unable to return the backup to required filename
+                    _logger.error("Could not rename the new password file into place, and unable to restore original file");
+                    throw new IOException("Could not rename the new password file into place, and unable to restore original file");
                 }
-            }
-            catch (IOException e)
-            {
-                _logger.error("Could not copy the new password file into place: " +e);
-                throw new IOException("Could not copy the new password file into place: " + e);
+                
+                _logger.error("Could not rename the new password file into place");
+                throw new IOException("Could not rename the new password file into place");
             }
         }
         finally
-- 
cgit v1.2.1