From a402e25166870ac7eda20e923169774797dd5085 Mon Sep 17 00:00:00 2001 From: qyt <486179@qq.com> Date: Thu, 30 Apr 2026 09:45:30 +0000 Subject: [PATCH 1/2] Potential fix for code scanning alert no. 47 Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .../Verification_XAuth/Verification_XAuthKey.cpp | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp b/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp index 7c5f27e..155130e 100644 --- a/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp +++ b/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp @@ -1,5 +1,8 @@ #include "pch.h" #include "Verification_XAuthKey.h" +#include +#include +#include /******************************************************************** // Created: 2025/09/30 16:47:21 // File Name: D:\XEngine_OPenSource\XEngine_Module\XEngine_Verification\Verification_XAuth\Verification_XAuthKey.cpp @@ -151,10 +154,18 @@ bool CVerification_XAuthKey::Verification_XAuthKey_FileWrite(VERIFICATION_XAUTHK { return false; } - //打开文件 - FILE* pSt_File = _xtfopen(lpszKeyFile, _X("wb")); + //打开文件(限制为仅当前用户可读写) + int nFile = open(lpszKeyFile, O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR); + if (nFile < 0) + { + Verification_IsErrorOccur = true; + Verification_dwErrorCode = ERROR_XENGINE_MODULE_VERIFICATION_XAUTH_OPENFILE; + return false; + } + FILE* pSt_File = fdopen(nFile, "wb"); if (NULL == pSt_File) { + close(nFile); Verification_IsErrorOccur = true; Verification_dwErrorCode = ERROR_XENGINE_MODULE_VERIFICATION_XAUTH_OPENFILE; return false; From 0ab3fd379e355e0cbba515238f930703de947a5a Mon Sep 17 00:00:00 2001 From: qyt <486179@qq.com> Date: Thu, 7 May 2026 16:24:25 +0800 Subject: [PATCH 2/2] modify:c-p --- XEngine_Module/XEngine_AIApi/pch.h | 4 +++- .../Verification_XAuthKey.cpp | 18 +++++++----------- XEngine_Module/XEngine_Verification/pch.h | 5 +++-- 3 files changed, 13 insertions(+), 14 deletions(-) diff --git a/XEngine_Module/XEngine_AIApi/pch.h b/XEngine_Module/XEngine_AIApi/pch.h index e968a32..7a6979f 100644 --- a/XEngine_Module/XEngine_AIApi/pch.h +++ b/XEngine_Module/XEngine_AIApi/pch.h @@ -10,13 +10,15 @@ // 添加要在此处预编译的标头 #define _CRT_SECURE_NO_WARNINGS #include "framework.h" +#include #endif #endif //PCH_H #include #include #include -#include #include +#include +#include #include #include #include diff --git a/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp b/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp index 155130e..9bde4f8 100644 --- a/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp +++ b/XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp @@ -1,8 +1,5 @@ #include "pch.h" #include "Verification_XAuthKey.h" -#include -#include -#include /******************************************************************** // Created: 2025/09/30 16:47:21 // File Name: D:\XEngine_OPenSource\XEngine_Module\XEngine_Verification\Verification_XAuth\Verification_XAuthKey.cpp @@ -155,17 +152,16 @@ bool CVerification_XAuthKey::Verification_XAuthKey_FileWrite(VERIFICATION_XAUTHK return false; } //打开文件(限制为仅当前用户可读写) - int nFile = open(lpszKeyFile, O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR); - if (nFile < 0) - { - Verification_IsErrorOccur = true; - Verification_dwErrorCode = ERROR_XENGINE_MODULE_VERIFICATION_XAUTH_OPENFILE; - return false; - } +#ifdef _MSC_BUILD + int nFile = _xtopen(lpszKeyFile, _O_WRONLY | _O_CREAT | _O_TRUNC | _O_BINARY, _S_IREAD | _S_IWRITE); + FILE* pSt_File = _fdopen(nFile, "wb"); +#else + int nFile = _xtopen(lpszKeyFile, O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR); FILE* pSt_File = fdopen(nFile, "wb"); +#endif if (NULL == pSt_File) { - close(nFile); + _close(nFile); Verification_IsErrorOccur = true; Verification_dwErrorCode = ERROR_XENGINE_MODULE_VERIFICATION_XAUTH_OPENFILE; return false; diff --git a/XEngine_Module/XEngine_Verification/pch.h b/XEngine_Module/XEngine_Verification/pch.h index b1fcf4e..ca8fe3a 100644 --- a/XEngine_Module/XEngine_Verification/pch.h +++ b/XEngine_Module/XEngine_Verification/pch.h @@ -8,12 +8,11 @@ #define PCH_H #ifdef _MSC_BUILD #define _CRT_SECURE_NO_WARNINGS -#include // 添加要在此处预编译的标头 #include "framework.h" +#include #else #include -#include #endif #endif //PCH_H #include @@ -21,6 +20,8 @@ #include #include #include +#include +#include #include #include #include