PHP 4.0 Bug #5744: tempnam() possibly used unsafely
| From: | cahagn_o at epita dot fr | Date: | Sun, 23 Jul 2000 10:12:58 +0000 |
| Subject: | PHP 4.0 Bug #5744: tempnam() possibly used unsafely | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-25552@lists.php.net to get a copy of this message | ||
From: cahagn_o@epita.fr
Operating system: NetBSD 1.3.3
PHP version: 4.0 Latest CVS (23/07/2000)
PHP Bug Type: Compile Warning
Bug description: tempnam() possibly used unsafely
Hi,
I already talked about that in php-dev but got no answer. So
I submit this as a bug report.
Since I compile PHP4 Beta1 to latest snapshop (July 23rd),
the final step (when linking php) shows:
file.c:599: warning: tempnam() possibly used unsafely,
consider using
mkstemp()
rfc1867.c:284: warning: tempnam() possibly used unsafely,
consider using
mkstemp()
I don't know if this important in this case, but as I saw
many bugs on Bugtraq with tempnam(), I thought I'd submit it
anyway.
I'm using NetBSD 1.3.3 x86 with gcc-2.7.2.2+myc2 and my
./configure is:
./configure
--with-config-file-path=/space/www/etc/httpd/conf/php_cgi \
--enable-discard-path \
--with-gd=/u/guest/www/mbin/i386-NetBSD \
--with-mysql \
--with-dbase \
--with-zlib=/u/guest/www/mbin/i386-NetBSD \
--with-mcrypt=/u/guest/www/mbin/i386-NetBSD \
--with-mhash=/u/guest/www/mbin/i386-NetBSD \
--enable-ftp \
--enable-inline-optimization \
--with-jpeg-dir=/u/guest/www/mbin/i386-NetBSD \
--with-imap=/u/guest/www/mbin/i386-NetBSD/lib
This warning does not happen with a standard RedHat 6.2 with
egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)