Issue 1512: CreateTemporaryFileName, potential security issue?
http://code.google.com/p/chromium/issues/detail?id=1512
New issue report by Lars.Gaarden:
CreateTemporaryFileName returns a file name and not a fd.
I've not looked at the users of this function, but at first glance it seems
like it would create the same kind of security issue / race condition that
is caused by using mktemp instead of mkstemp; (between the time the
pathname is constructed and the file is created another process might have
created a file with the same name, leading to a possible security hole).
Issue attributes:
Status: Unconfirmed
Owner: [EMAIL PROTECTED]
Labels: Type-Bug Pri-2 OS-All Area-Unknown
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Chromium-bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---
