From d83616c1ed33f224ede8fc122e7238ff6c2004ef Mon Sep 17 00:00:00 2001 From: heko Date: Tue, 2 Oct 2001 20:20:16 +0000 Subject: [PATCH] I knew I missed something. Add security notes about temporary files. ok naddy@ --- www/amaya/browser/pkg/SECURITY | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 www/amaya/browser/pkg/SECURITY diff --git a/www/amaya/browser/pkg/SECURITY b/www/amaya/browser/pkg/SECURITY new file mode 100644 index 00000000000..dd96330b57a --- /dev/null +++ b/www/amaya/browser/pkg/SECURITY @@ -0,0 +1,10 @@ + +tempnam() is used in a function in libwww to generate +a temporary file. This function is then used in libwww +for various purposes. + +Possible temp file races have *not* been checked for. + +There is also one tmpnam() call in libwww. That part +does not seem to be actually used by Amaya. +