Follow-up Comment #1, bug #27369 (project findutils):

We are NOT consistently using the gnulib *_safer modules.  Both find.c and
ftsfind.c called unprotected open() in main(), and ftsfind.c called
unprotected dup().  Furthermore, find.c uses the closein module, but ftsfind.c
only used the closeout module.

We need at least this patch in addition to bumping import-gnulib.config to
the latest gnulib (although I'm toying with the idea of making defs.h just
include all the headers up front, rather than trying to the includes of each
affected file).  This patch would also need a NEWS entry and testsuite
addition.


(file #18670)
    _______________________________________________________

Additional Item Attachment:

File name: findutils.patch1               Size:3 KB


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?27369>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/



Reply via email to