I think it is a false positive:

# test functionality of the compiler
javac_works='not present'
if test -n "$JAVAC"; then
    javac_works='not functional'
    rm -rf /tmp/A.java /tmp/A.class           ## <- note the rm -rf
    echo "public class A { }" > /tmp/A.java
    if test -e /tmp/A.java; then
        if "${JAVAC}" /tmp/A.java >/dev/null; then
            if test -e /tmp/A.class; then
                javac_works=yes
            fi
        fi
    fi
    rm -rf /tmp/A.java /tmp/A.class
fi


Right before /tmp/A.* are being used, they are being wiped. No symlink
attack.

Unless I hear objections, I plan to close this one.

Dirk

-- 
Three out of two people have difficulties with fractions.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to