I wrote a while ago:

> I slightly wonder about the writing of the tmp file
>   open("/tmp/gv_random_some.pdf.tmp", O_WRONLY|O_CREAT|O_TRUNC, 0666)
> from within gs (no O_EXCL so would follow a symlink allowing clobber).

It is not for gs to verify the security of the tmp file passed as
argument (it cannot do that), but gv should pre-create the file in
a safe way.

Cheers, Paul

Paul Szabo   p...@maths.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to