Security issue with tempnam() ?

From: Date: Wed, 05 Jul 2000 22:26:31 +0000
Subject: Security issue with tempnam() ?
Groups: php.dev 
Request: Send a blank email to php-dev+get-23640@lists.php.net to get a copy of this message
Hi, I just checked bugtraq list and saw issues with tempnam(). I'm not a security expert but I have this warning at the end of compilation with PHP 4.0.1pl2 (in fact, every PHP4 release and nearly PHP3 since 3.0.11) compiled on NetBSD 1.3.3 x86 with gcc 2.7.2.2, this warning does not appear when compiling on Linux with egcs-2.91.66 19990314, glibc 2.1 Didn't check the code though, maybe it is safe as implemented in PHP4. :) file.c:599: warning: tempnam() possibly used unsafely, consider using mkstemp() rfc1867.c:284: warning: tempnam() possibly used unsafely, consider using mkstemp() -- Olivier.Cahagne@epita.fr

« previous php.dev (#23640) next »