cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

remove extra file

Browse Source
This commit is contained in:
turan 1999-01-12 05:18:58 +00:00
parent 8dbb6c4d21
commit 280aef9e3a
1 changed files with 0 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
mail/mutt/pkg/SECURITY
View File

@ -1,17 +0,0 @@
$OpenBSD: SECURITY,v 1.2 1999/01/11 02:40:06 marc Exp $
Note: in ${WRKDIR}/rfc1524.c the function mutt_adv_mktemp
uses mktemp, but the resulting name is used much later in
a procedure that does an open with O_CREAT | O_EXCL. If the
open fails an error is reported and the user can try again.
If the open succeeds the fd is used in fdopen to get a FILE.
No security hole that I saw.
If the mktemp is replaced with mkstemp the open will fail as
the named file will exist. In order to use mkstemp the interface
to several functions will have to change so the fd returned by
mkstemp is eventually passed to the function that currently does
the open.
Remember s/mktemp/mkstemp/g does NOT work as the two functions have
different semantics.