#1258: Insecure temporary file creation
-------------------------------+--------------------------------------------
Reporter: greenrd | Owner:
Type: bug | Status: new
Priority: normal | Milestone:
Component: libraries/base | Version: 6.6
Severity: major | Keywords: security
Difficulty: Easy (1 hr) | Testcase:
Architecture: Multiple | Os: Multiple
-------------------------------+--------------------------------------------
openTempFile and openBinaryTempFile (in libraries/base/GHC/Handle.hs)
create temporary files with predictable names, making a symlink attack
possible.
--
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/1258>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler
_______________________________________________
Glasgow-haskell-bugs mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs