Bug#787963: wdiff: please don't use the same node name two times

2023-09-18 Thread Denver Gingerich
On Fri, Sep 15, 2023 at 01:58:50PM +0200, Santiago Vila wrote: > Some time ago I received (via clone & reassign), the following report from > the Debian bug system: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787963 > > To summarize: The command: > > info wdiff > > jumps into the

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

2008-06-17 Thread Denver Gingerich
On Tue, Jun 17, 2008 at 7:40 AM, Santiago Vila [EMAIL PROTECTED] wrote: Denver: Please tell me if you consider this patch acceptable to fix the insecure use of tmpnam, as I plan to apply it to the Debian version of wdiff: diff -ru wdiff-0.5.original/wdiff.c wdiff-0.5/wdiff.c ---

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

2008-06-17 Thread Denver Gingerich
On Tue, Jun 17, 2008 at 12:17 PM, Nico Golde [EMAIL PROTECTED] wrote: [...] Secondly, the manpage for mkstemp has the following note: Don't use this function, use tmpfile(3) instead.. What manpage do you have there? At least this is not the case in the posix manuals I have. This line can be

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

2008-06-17 Thread Denver Gingerich
On Tue, Jun 17, 2008 at 1:26 PM, Nico Golde [EMAIL PROTECTED] wrote: * Denver Gingerich [EMAIL PROTECTED] [2008-06-17 19:20]: On Tue, Jun 17, 2008 at 12:17 PM, Nico Golde [EMAIL PROTECTED] wrote: [...] Secondly, the manpage for mkstemp has the following note: Don't use this function, use