orccodemem: mask group/other bits for temporary file

Ensures another user can't inject code into your process when
winning a race with the ORC temp file code.

Coverity 1147013

1 files changed, 3 insertions, 0 deletions

diff --git a/orc/orccodemem.c b/orc/orccodemem.c
index b28a4ed..2c93f77 100644
--- a/orc/orccodemem.c
+++ b/orc/orccodemem.c
@@ -198,11 +198,14 @@ orc_code_region_allocate_codemem_dual_map (OrcCodeRegion *region,
   int fd;
   int n;
   char *filename;
+  mode_t mask;
 
   filename = malloc (strlen ("/orcexec..") +
       strlen (dir) + 6 + 1);
   sprintf(filename, "%s/orcexec.XXXXXX", dir);
+  mask = umask (0066);
   fd = mkstemp (filename);
+  umask (mask);
   if (fd == -1) {
     ORC_WARNING ("failed to create temp file");
     free (filename);