[Date Prev][Date Next][Thread Prev][Thread Next]
- Subject: Re: Warnings and potential security problem in compilation of Lua5.0-alpha
- From: "Peter Loveday" <peter@...>
- Date: Thu, 5 Dec 2002 09:26:43 -0500
> I think this is connected to the security problems of the tmpnam function
> file lua-5.0-alpha/src/lib/liolib.c, line 440.
> support/howto/secprog/secprog3.html#tmpf). It would be a very good idea to
> switch to mkstemp, or if this is non-standard, at least allow it as an
> compile-time option.
I think this is more connected to the danger of tmpname potentially
returning a name that already exists from a second application calling
tmpname at the same time.
io.tmpfile was added as an alternative solution to this problem.
Love, Light and Peace,
- Peter Loveday
Director of Development, eyeon Software