Re: Fw: [Groff] Bug#56702: [PATCH] security bugfix for grohtml

[Jeroen Ruigrok/Asmodai]

-On [20000207 16:00], Gaius Mulley (address@hidden) wrote:
>
>-static FILE *create_file (char *filename)
>+/*
>+ *  create_tmp_file - opens a filename in /tmp carefully checking for failure
>+ *                    otherwise security could be circumvented.
>+ */
>+
>+static FILE *create_tmp_file (char *filename)
> {
>   FILE *f;
>+  int   fd;

This whole snippet plus some more really reminds of the functions:

mktemp(), mkstemp(), mkstemps() and these should be pretty portable.

You might, or not of course, want to consider using these instead,
unless I must've missed the idea of code presented for the temp file
creation.

-- 
Jeroen Ruigrok vd Werven/Asmodai    address@hidden|bart.nl|freebsd.org]
Documentation nutter/B-rated Coder BSD: Technical excellence at its best  
The BSD Programmer's Documentation Project <http://home.wxs.nl/~asmodai>
Slow down, god can't hear you...