[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: tmpnam usage warning



Colin Tuckley wrote:
> tmpnam generates a name for a file which is guaranteed *not* to exist

No, tmpnam generates a name for a file that did not exist at some point
in time, but that *will* exist in the worst possible state (eg, a
symlink to something important) when an attacker is targeting your program.

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


Reply to: