From owner-freebsd-audit Mon Nov 20 1:58:23 2000 Delivered-To: freebsd-audit@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id 442FB37B479 for ; Mon, 20 Nov 2000 01:58:21 -0800 (PST) Received: (from kris@localhost) by citusc17.usc.edu (8.11.1/8.11.1) id eAK9xI675734; Mon, 20 Nov 2000 01:59:18 -0800 (PST) (envelope-from kris) Date: Mon, 20 Nov 2000 01:59:17 -0800 From: Kris Kennaway To: Brad Knowles Cc: FreeBSD audit mailing list Subject: Re: Possible unsafe uses of mktemp() found during "make buildworld"... Message-ID: <20001120015917.A75391@citusc17.usc.edu> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="9jxsPFA5p3P2qPhR" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from blk@skynet.be on Mon, Nov 20, 2000 at 10:53:27AM +0100 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --9jxsPFA5p3P2qPhR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Nov 20, 2000 at 10:53:27AM +0100, Brad Knowles wrote: > Folks, >=20 > I don't know if this is interesting at all or not, but I recently=20 > discovered a number of "warning: mktemp() possibly used unsafely;=20 > consider using mkstemp()" type errors during a recent "make=20 > buildworld", and I thought it might be of use to provide that=20 > information here. Well, they'd be more useful with pathnames attached to work out which directory they live in :-) The existence of these is known, though a master list of things to fix would be good..the really useful thing would be to submit patches to fix them. Kris --9jxsPFA5p3P2qPhR Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjoY9fUACgkQWry0BWjoQKWfvACg2wtp4e36z5hgquq4F+vPhwHV MwgAmwYZ9PVoaC3vTnO/YbNAtKNglIh4 =UQyG -----END PGP SIGNATURE----- --9jxsPFA5p3P2qPhR-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message