From 09e713c9e745bdf85b35d02b699153bb293dde47 Mon Sep 17 00:00:00 2001 From: qyt <486179@qq.com> Date: Fri, 8 May 2026 09:47:07 +0000 Subject: [PATCH] Potential fix for code scanning alert no. 74 Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .../XEngine_StorageApp/StorageApp_UPLoader.cpp | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/XEngine_Source/XEngine_StorageApp/StorageApp_UPLoader.cpp b/XEngine_Source/XEngine_StorageApp/StorageApp_UPLoader.cpp index 22b4c01..95f34c8 100644 --- a/XEngine_Source/XEngine_StorageApp/StorageApp_UPLoader.cpp +++ b/XEngine_Source/XEngine_StorageApp/StorageApp_UPLoader.cpp @@ -1,4 +1,8 @@ #include "StorageApp_Hdr.h" +#include +#include +#include +#include XHTHREAD XCALLBACK XEngine_UPLoader_HTTPThread(XPVOID lParam) { @@ -192,9 +196,20 @@ bool XEngine_Task_HttpUPLoader(LPCXSTR lpszClientAddr, LPCXSTR lpszMsgBuffer, in return true; } //文件是否可写 - FILE* pSt_File = _xtfopen(tszFileDir, _X("wb")); + int nFileFD = open(tszFileDir, O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR); + if (nFileFD < 0) + { + st_HDRParam.bIsClose = true; + st_HDRParam.nHttpCode = 403; + HttpProtocol_Server_SendMsgEx(xhUPHttp, tszSDBuffer, &nSDLen, &st_HDRParam); + XEngine_Net_SendMsg(lpszClientAddr, tszSDBuffer, nSDLen, nNetType); + XLOG_PRINT(xhLog, XENGINE_HELPCOMPONENTS_XLOG_IN_LOGLEVEL_ERROR, _X("上传客户端:%s,准备上传文件:%s 失败,创建文件失败"), lpszClientAddr, tszFileDir); + return true; + } + FILE* pSt_File = fdopen(nFileFD, "wb"); if (NULL == pSt_File) { + close(nFileFD); st_HDRParam.bIsClose = true; st_HDRParam.nHttpCode = 403; HttpProtocol_Server_SendMsgEx(xhUPHttp, tszSDBuffer, &nSDLen, &st_HDRParam);