Re: Bug#278283: insecure temporary file usage in gettextize and autopoint (fwd)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bruno Haible <bruno@xxxxxxxxx> wrote:
> Not bad, but still not perfect: mktemp is not a POSIX standardized
> utility, and $RANDOM is bash specific.

What sort of threat are you trying to defend against?  Even if mktemp
is not available, and even if $RANDOM is empty, mkdir will still
either create a new directory or correctly fail.  It won't let you use
an existing directory (or symlink to a directory).


paul


_______________________________________________
Autoconf mailing list
Autoconf@xxxxxxx
http://lists.gnu.org/mailman/listinfo/autoconf

[Index of Archives]     [GCC Help]     [Kernel Discussion]     [RPM Discussion]     [Red Hat Development]     [Yosemite News]     [Linux USB]     [Samba]

  Powered by Linux