[Duplicity-tracker] [patch #6299] re-design tempfile handling

[Peter Schuller]

Follow-up Comment #1, patch #6299 (project duplicity):

Note that as far as I am aware there should be no security issues with this
code under "normal" circumstances.

Things are not perfect in the presence of tmpwatch/tmpreaper and similar, but
still a lot better than before.

Further work would include making use of mkstemp() whenever mktemp() is
currently being used, to squash all security issues.

However, as I noted in the original patch that broke FTP, using mkstemp()
semantics required some changes in various places. Maybe I'll look into it in
the future.

Also note that this version should now be much better at cleaning up after
itself compared to the old code, because cleanup is now always performed even
if exceptions are thrown.


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/patch/?6299>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/