[prev in list] [next in list] [prev in thread] [next in thread] 

List:       autoconf-bug
Subject:    [Bruno Haible] Bug#278283: insecure temporary file usage in gettextize and autopoint
From:       Alexandre Duret-Lutz <adl () src ! lip6 ! fr>
Date:       2004-10-26 19:40:09
Message-ID: 2004-10-26-21-40-10+27520+adl () gnu ! org
[Download RAW message or body]


From: Bruno Haible <bruno@clisp.org>
To: Alexandre Duret-Lutz <adl@src.lip6.fr>
Subject: Re: Bug#278283: insecure temporary file usage in gettextize and autopoint (fwd)
Date: Tue, 26 Oct 2004 20:34:55 +0200

>   tmp=$TMPDIR/foo$$-$RANDOM
>   (umask 077 && mkdir $tmp)

I think that line should be

    (umask 077 && mkdir "$tmp")

because $TMPDIR can contain spaces or asterisks or so.

Bruno




[prev in list] [next in list] [prev in thread] [next in thread]