Re: svn commit: rev 3973 - trunk/subversion/tests/libsvn_delta

Matt Kraai wrote:

>On Wed, Dec 04, 2002 at 07:22:40PM +0100, Branko ??ibej wrote:
>
>
>>Matt Kraai wrote:
>>
>>
>>>This use of tempnam is insecure.
>>>
>>>
>>>
>>Why should I care about that in a test program? This code is not part of
>>the Subversion libraries.
>>
>>
>
>Because people who test Subversion are vulnerable.
>
Oh yes, how could I be so stupid? It's totally natural to run
random-test as root, in a loop, and of course the file it opens using
tempnam is piped immediately to a shell.

If you want to rewrite random-test, be my guest.

-- 
Brane Čibej   <brane_at_xbc.nu>   http://www.xbc.nu/brane/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org