[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Problems with newest release (make/base 1.7.2 gui/back 0.8.8)
|
From: |
Chris B. Vetter |
|
Subject: |
Re: Problems with newest release (make/base 1.7.2 gui/back 0.8.8) |
|
Date: |
Thu, 24 Jul 2003 12:55:42 -0700 |
On Thu, 24 Jul 2003 15:36:47 -0400
"Yen-Ju Chen" <yjchenx@hotmail.com> wrote:
[...]
> The compilation is O.K. but in the end of gnustep-back,
> it complains:
That's not a problem with the newest release. It was re-introduced about
two or three weeks ago and is particular to the BSDs.
[...]
> Where do these problems come from ?
[...]
On BSDs, des_cipher(3) and encrypt(3) are defined in libcrypt which
isn't automatically linked.
mktemp(3) and tmpnam(3) are defined in libc, but have flaws with respect
to security and should therefor not be used.
IIRC, both pose a risk with respect to a buffer overflow for file name
length and it's possible to (re-)create the same file name twice (which
shouldn't happen, of course)
--
Chris