[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: lynx-dev LYUtils and mktemp, and string2.h warnings (glibc 2.2)
|
From: |
Thomas Dickey |
|
Subject: |
Re: lynx-dev LYUtils and mktemp, and string2.h warnings (glibc 2.2) |
|
Date: |
Sat, 23 Dec 2000 13:36:11 -0500 |
|
User-agent: |
Mutt/1.2.5i |
On Sat, Dec 23, 2000 at 02:18:12PM -0200, Frédéric L . W . Meunier wrote:
> David Woolley wrote:
>
> > This sort of attack has been discussed in the past. I
> > believe one of the protections is not to use the public
> > temporary files directory.
>
> There's a thread about the change introduced in glibc 2.2 at
> the libc-alpha mailing-list:
>
> http://sources.redhat.com/ml/libc-alpha/2000-11/msg00180.html
in any case, it's overridden by defining USE_MKSTEMP in userdefs.h
see: 2000-03-26 (2.8.3dev.23)
--
Thomas E. Dickey <address@hidden>
http://dickey.his.com
ftp://dickey.his.com
; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden