Re: Fw: [Groff] Bug#56702: [PATCH] security bugfix for grohtml

[Werner LEMBERG]

> >+static FILE *create_tmp_file (char *filename)
> > {
> >   FILE *f;
> >+  int   fd;
> 
> This whole snippet plus some more really reminds of the functions:
> 
> mktemp(), mkstemp(), mkstemps() and these should be pretty portable.
> 
> You might, or not of course, want to consider using these instead,
> unless I must've missed the idea of code presented for the temp file
> creation.

I second that.  There is a function called xtmpfile() in
src/libgroff/tmpfile.cc -- maybe it is possible to extend it so that
it can be used with grohtml also.


    Werner