From a2fe4dbe39541b2c235d8dee62d7c3695722f138 Mon Sep 17 00:00:00 2001
From: Matthew Chen <matthew@signal.org>
Date: Thu, 6 Sep 2018 13:29:14 -0400
Subject: [PATCH] Refine image validation.

---
 .../src/Messages/Attachments/OWSThumbnailService.swift           | 1 +
 1 file changed, 1 insertion(+)

diff --git a/SignalServiceKit/src/Messages/Attachments/OWSThumbnailService.swift b/SignalServiceKit/src/Messages/Attachments/OWSThumbnailService.swift
index 77e7353a3..165177b0d 100644
--- a/SignalServiceKit/src/Messages/Attachments/OWSThumbnailService.swift
+++ b/SignalServiceKit/src/Messages/Attachments/OWSThumbnailService.swift
@@ -172,6 +172,7 @@ private struct OWSThumbnailRequest {
         } catch let error as NSError {
             throw OWSThumbnailError.externalError(description: "File write failed: \(thumbnailPath), \(error)", underlyingError: error)
         }
+        OWSFileSystem.protectFileOrFolder(atPath: thumbnailPath)
         return OWSLoadedThumbnail(image: thumbnailImage, data: thumbnailData)
     }
 }