#1258: Insecure temporary file creation
-------------------------------+--------------------------------------------
    Reporter:  greenrd         |       Owner:          
        Type:  bug             |      Status:  new     
    Priority:  normal          |   Milestone:          
   Component:  libraries/base  |     Version:  6.6     
    Severity:  major           |    Keywords:  security
  Difficulty:  Easy (1 hr)     |    Testcase:          
Architecture:  Multiple        |          Os:  Multiple
-------------------------------+--------------------------------------------
openTempFile and openBinaryTempFile (in libraries/base/GHC/Handle.hs)
 create temporary files with predictable names, making a symlink attack
 possible.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/1258>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler
_______________________________________________
Glasgow-haskell-bugs mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs

Reply via email to