Re: psvn.el: insecure temporary files

At Sat, 09 Aug 2003 19:12:03 +0300,
Kalle Olavi Niemitalo wrote:

> > (make-temp-name (temp-directory))
>
> That does not actually create the file, so it is possible for
> another process to create a symlink there after make-temp-name
> has chosen the name. The mustbenew parameter of write-region
> would allow detecting that.
>
> > (mm-make-temp-file (temp-directory))
> > this actually looks like it comes from gnus.. so maybe borrow the
> > code?
>
> The version in CVS Gnus either redirects to make-temp-file (which
> is present in Emacs 21.2 but not in XEmacs 21.4) or is as unsafe
> as make-temp-name.

FYI, apel ftp://ftp.m17n.org/pub/mule/apel/ 10.5 or later has `make-temp-name'
implementation for XEmacs or older Emacs.

Regards,
Fumitoshi UKAI

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Aug 9 19:56:51 2003