CVS:dmake-deb/patches tempnam-isnt-anymore.diff,NONE,1.1
Update of /cvs/debian-openoffice/dmake-deb/patches
In directory gluck:/tmp/cvs-serv14533/patches
Added Files:
tempnam-isnt-anymore.diff
Log Message:
* do not mention the tempfile vulnerability in the manpage in BUGS
since it is fixed.
--- NEW FILE: tempnam-isnt-anymore.diff ---
Index: dmake/man/dmake.tf
===================================================================
RCS file: /cvs/tools/dmake/man/dmake/man/dmake.tf,v
retrieving revision 1.2.46.1
diff -u -r1.2.46.1 dmake/man/dmake.tf
--- dmake/man/dmake.tf 8 Oct 2003 14:34:29 -0000 1.2.46.1
+++ dmake/man/dmake.tf 21 Oct 2003 14:10:36 -0000
@@ -3116,10 +3116,6 @@
NET that have helped in making \fBdmake\fP one of the best Make tools
available.
.SH BUGS
-Dmake's temporary file creation uses the tempnam function to generate unique
-filenames in its working directory, but does not check that the file does not
-exist at the time it is created. This could possibly be a security problem if
-the directory where dmake is run is writeable by untrusted users.
.PP
Some system commands return non-zero status inappropriately.
Use
Reply to: