Date: Sat, 4 Mar 2000 02:10:03 -0800 (PST) From: Phil Homewood <phil@rivendell.apana.org.au> To: freebsd-bugs@FreeBSD.org Subject: Re: gnu/17175: [PATCH] send-pr predictable tempfile vulnerability Message-ID: <200003041010.CAA18744@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR gnu/17175; it has been noted by GNATS.
From: Phil Homewood <phil@rivendell.apana.org.au>
To: freebsd-gnats-submit@FreeBSD.org
Cc:
Subject: Re: gnu/17175: [PATCH] send-pr predictable tempfile vulnerability
Date: Sat, 4 Mar 2000 20:07:01 +1000
OOPS. Previous patch is mildly bogus. This one works better.
--- src/gnu/usr.bin/send-pr/send-pr.sh.orig Sat Sep 4 06:06:55 1999
+++ src/gnu/usr.bin/send-pr/send-pr.sh Sat Mar 4 20:01:14 2000
@@ -75,9 +75,9 @@
[ -z "$TMPDIR" ] && TMPDIR=/tmp
-TEMP=$TMPDIR/p$$
-BAD=$TMPDIR/pbad$$
-REF=$TMPDIR/pf$$
+TEMP=`mktemp -t send-pr.p` || exit 1
+BAD=`mktemp -t send-pr.pbad` || exit 1
+REF=`mktemp -t send-pr.pf` || exit 1
if [ -z "$LOGNAME" -a -n "$USER" ]; then
LOGNAME=$USER
--
Phil Homewood dot@atat.dotat.org phil@rivendell.apana.org.au
Member, Australian Public Access Network Association
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200003041010.CAA18744>