Security issue with tempnam() ?
| From: | Olivier Cahagne | Date: | Wed, 05 Jul 2000 22:26:31 +0000 |
| Subject: | Security issue with tempnam() ? | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-23640@lists.php.net to get a copy of this message | ||
Hi,
I just checked bugtraq list and saw issues with tempnam().
I'm not a security expert but I have this warning at the end of
compilation with PHP 4.0.1pl2 (in fact, every PHP4 release and nearly
PHP3 since 3.0.11) compiled on NetBSD 1.3.3 x86 with gcc 2.7.2.2, this
warning does not appear when compiling on Linux with egcs-2.91.66
19990314, glibc 2.1
Didn't check the code though, maybe it is safe as implemented in PHP4.
:)
file.c:599: warning: tempnam() possibly used unsafely, consider using
mkstemp()
rfc1867.c:284: warning: tempnam() possibly used unsafely, consider using
mkstemp()
--
Olivier.Cahagne@epita.fr