[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-gnulib] mkstemp

From: Derek Robert Price
Subject: Re: [Bug-gnulib] mkstemp
Date: Mon, 08 Sep 2003 11:44:10 -0400
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030624 Netscape/7.1

Hash: SHA1

Paul Eggert wrote:

|Derek Robert Price <address@hidden> writes:
|>Perhaps it is silly to be working around bugs in glibc this old?  It was
|>fixed January 11, 1999.  One could hope that the sysadmin in charge of
|>the system on which CVS is being compiled has read the appropriate
|>security notices and updated to a more recent version of glibc.
|That's what I'd say, too.  The problem affects all sorts of programs,
|not just CVS.
|>Then again an extra chmod is pretty cheap.
|I suspect that the chmod doesn't really fix the race condition.
|Setting the umask before, and restoring it after, would probably be a
|better fix; but I wouldn't bother.

Thanks for the advice Paul!  I removed the GLIBC compiler switch and the
chmod from CVS 1.12.x and replaced it with what I hope is an informative
comment about what used to happen and why anyone who wants to
second-guess me should fiddle with the umask instead.  I also added a
comment to the NEWS file about upgrading to GLIBC version 2.0.7 or greater.


- --
~                *8^)

Email: address@hidden

Get CVS support at <http://ximbiot.com>!
- --
"It's difficult to work in a group when you're omnipotent."

   -Q, "Deja Q"
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Netscape - http://enigmail.mozdev.org


reply via email to

[Prev in Thread] Current Thread [Next in Thread]