From 4305d4b7b186be71a929fa32e78724a4674bdd65 Mon Sep 17 00:00:00 2001
From: Justin Starry <justin@solana.com>
Date: Fri, 27 Aug 2021 08:44:38 -0700
Subject: [PATCH] Add missing owner check to bpf loader close ix (#19460)

---
 programs/bpf_loader/src/lib.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/programs/bpf_loader/src/lib.rs b/programs/bpf_loader/src/lib.rs
index c85e379dca..b85d6026c2 100644
--- a/programs/bpf_loader/src/lib.rs
+++ b/programs/bpf_loader/src/lib.rs
@@ -692,6 +692,10 @@ fn process_loader_upgradeable_instruction(
                         ic_logger_msg!(logger, "Program account is not writable");
                         return Err(InstructionError::InvalidArgument);
                     }
+                    if &program_account.owner()? != program_id {
+                        ic_logger_msg!(logger, "Program account not owned by loader");
+                        return Err(InstructionError::IncorrectProgramId);
+                    }
 
                     match program_account.state()? {
                         UpgradeableLoaderState::Program {