From owner-freebsd-security Thu Jun 7 19:26: 4 2001 Delivered-To: freebsd-security@freebsd.org Received: from mafalda.univalle.edu.co (mafalda.univalle.edu.co [200.24.102.10]) by hub.freebsd.org (Postfix) with ESMTP id 404F437B401 for ; Thu, 7 Jun 2001 19:25:55 -0700 (PDT) (envelope-from buliwyf@libertad.univalle.edu.co) Received: from libertad.univalle.edu.co (libertad.univalle.edu.co [216.6.69.11]) by mafalda.univalle.edu.co (8.11.3/8.11.3) with ESMTP id f582PjU05952 for ; Thu, 7 Jun 2001 21:25:45 -0500 (GMT) Received: from localhost (buliwyf@localhost) by libertad.univalle.edu.co (8.10.0/8.10.0) with ESMTP id f582UGS58738; Thu, 7 Jun 2001 21:30:16 -0500 (COT) Date: Thu, 7 Jun 2001 21:30:16 -0500 (COT) From: Buliwyf McGraw To: Michael Tang Helmeste Cc: security@FreeBSD.ORG Subject: RE: Unsafe Message In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > If its not in your code, its most likely in one of the libraries that it > uses. Thanks for your answer. I was reading the man of the functions: tmpnam() tempnam, tmpfile, tmpnam - temporary file routines mkstemp() make temporary file name (unique) But i am not sure about how improvement the libraries... i mean, there is a patch or something for this specific error??? Thanks for any "smart" answer. > > -----Original Message----- > From: owner-freebsd-security@FreeBSD.ORG > [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Chris Johnson > Sent: Thursday, June 07, 2001 9:36 PM > To: Buliwyf McGraw > Cc: security@FreeBSD.ORG > Subject: Re: Unsafe Message > > > On Thu, Jun 07, 2001 at 08:32:32PM -0500, Buliwyf McGraw wrote: > > Everytime that i compile something on my server, i get this message: > > > > warning: tmpnam() possibly used unsafely; consider using mkstemp() > > > > What it means? > > tmpnam() was possibly used unsafely > > > how i can avoid it? > > consider using mkstemp() > > Chris > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > ======================================================================= Buliwyf McGraw Administrador del Servidor Libertad Centro de Servicios de Informacion Universidad del Valle ======================================================================= To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message