d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Improve the explanation on the (in)security of mktemp(3).

Browse Source
This commit is contained in:
Sheldon Hearn 2000-01-25 13:58:46 +00:00
parent d59590d848
commit 71207448cf
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
lib/libc/stdio/mktemp.3
View File

@ -186,9 +186,12 @@ See
.Xr gcc 1
for more information.
.Sh BUGS
An attacker can guess the filenames produced by
.Fn mktemp .
Whenever it is possible
This family of functions produces filenames which can be guessed.
This makes the race in
.Fn mktemp ,
between testing for a file's existence and opening it for use,
particularly dangerous from a security perspective.
Whenever it is possible,
.Fn mkstemp
should be used instead.
.Sh SEE ALSO