diff --git a/qrexec-lib/unpack.c b/qrexec-lib/unpack.c index 9a44e72..51caf94 100644 --- a/qrexec-lib/unpack.c +++ b/qrexec-lib/unpack.c @@ -104,15 +104,19 @@ void process_one_file_reg(struct file_header *untrusted_hdr, const char *untrusted_name) { int ret; - int fdout; + int fdout = -1; /* make the file inaccessible until fully written */ - fdout = open(".", O_WRONLY | O_TMPFILE, 0700); - if (fdout < 0 && errno==ENOENT) { - /* if it fails, do not attempt further use - most likely kernel too old */ - use_tmpfile = 0; - fdout = open(untrusted_name, O_WRONLY | O_CREAT | O_EXCL | O_NOFOLLOW, 0000); /* safe because of chroot */ + if (use_tmpfile) { + fdout = open(".", O_WRONLY | O_TMPFILE, 0700); + if (fdout < 0 && errno==ENOENT) { + /* if it fails, do not attempt further use - most likely kernel too old */ + use_tmpfile = 0; + } else + do_exit(errno, untrusted_name); } + if (fdout < 0) + fdout = open(untrusted_name, O_WRONLY | O_CREAT | O_EXCL | O_NOFOLLOW, 0000); /* safe because of chroot */ if (fdout < 0) do_exit(errno, untrusted_name); /* sizes are signed elsewhere */