Changeset 94286 in vbox

Timestamp:

Mar 17, 2022 11:22:48 AM (3 years ago)

Author:

vboxsync

Message:

IPRT/Win: Prefer LOCALAPPDATA over TMP / TEMP for RTPathTemp(). bugref:10201

File:

• trunk/src/VBox/Runtime/r3/RTPathTemp.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/r3/RTPathTemp.cpp

@@ -48 +48 @@
         "IPRT_TMPDIR"
 #if defined(RT_OS_WINDOWS)
-        , "TMP", "TEMP", "USERPROFILE"
+        /*
+         * Make sure that %LOCALAPPDATA% is preferred over %TMP% / %TEMP%, as those can point
+         * to generic / old-school temp directories like "C:\WINDOWS\TEMP", which also is writable for unprivileged users
+         * under some circumstances.
+         *
+         * See @bugref{10201}
+         */
+        , "LOCALAPPDATA", "TMP", "TEMP", "USERPROFILE"
 #elif defined(RT_OS_OS2)
         , "TMP", "TEMP", "TMPDIR"