[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20171106061544.apbxborivf4lye7m@matica.foolinux.mooo.com>
Date: Sun, 5 Nov 2017 22:15:44 -0800
From: Ian Zimmerman <itz@...y.loosely.org>
To: oss-security@...ts.openwall.com
Subject: Re: Security risk of vim swap files
On 2017-11-01 19:12, Solar Designer wrote:
> On Wed, Nov 01, 2017 at 07:02:22PM +0100, Jakub Wilk wrote:
> > Unfortunately, glibc's implementation of tmpfile(3), which is the
> > most fool-proof interface for dealing with temporary files that the
> > C library offers, doesn't honour TMPDIR. :(
>
> We've been carrying a patch for this for ages:
Do you know why this has not been changed upstream? The code (and
infopage) mentions "SVID compatibility". Do you know of any programs
that break with this change?
--
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet, fetch the TXT record for the domain.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
