[Autofix][high] Alert #47: File created without restricting permissions

[xengine-qyt]

🤖 Copilot Autofix 自动修复报告

---

📋 基本信息

字段	内容
Alert ID	#47
安全级别	high
规则名称	File created without restricting permissions
问题文件	XEngine_Module/XEngine_Verification/Verification_XAuth/Verification_XAuthKey.cpp 第 155 行
CWE 分类	external/cwe/cwe-732
规则标签	external/cwe/cwe-732, security

---

🔍 问题说明

File created without restricting permissions

When you create a file, take care to give it the most restrictive permissions possible. A typical mistake is to create the file with world-writable permissions. This can allow an attacker to write to the file, which can give them unexpected control over the program.

Recommendation

Files should usually be created with write permissions only for the current user. If broader permissions are needed, including the users' group should be sufficient. It is very rare that a file needs to be world-writable, and care should be taken not to make assumptions about the contents of any such file.

On Unix systems, it is possible for the user who runs the program to restrict file creation permissions using umask. However, a program should not assume t

---

🤖 AI 修复思路

Use a secure create-open path that explicitly sets restrictive permissions when creating the key file, instead of plain _xtfopen(...,"wb").

Best fix in this function:

• Replace _xtfopen(lpszKeyFile, _X("wb")) with:
  1. low-level open(..., O_WRONLY | O_CREAT | O_TRUNC, S_IRUSR | S_IWUSR) (owner read/write only, 0600);
  2. convert descriptor to FILE* via fdopen(..., "wb").
• Keep existing write/encryption logic unchanged.
• Add error handling for both open and fdopen failure (and close fd on fdopen failure).
• Add required headers for open, flags, and mode macros in this cpp file.

This preserves behavior (overwrite/create and binary write) while enforcing restrictive permissions at creation time.

---

✅ Review 检查清单

• 理解了漏洞的成因和影响范围
• 确认 AI 修复逻辑正确，没有遗漏边界情况
• 确认修复没有改变原有业务逻辑
• 确认没有引入新的安全问题
• CI / 单元测试全部通过
• 如有必要，已补充对应的测试用例

---

此 PR 由 GitHub Copilot Autofix 自动生成，请仔细审核后再 merge。