d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document dependence of mktemp(3) on the non-reentrant arc4random(3).

Browse Source
This commit is contained in:
green 2004-02-20 04:08:28 +00:00
parent 59b7a05d47
commit bf4ea3aa0d
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/libc/stdio/mktemp.3
View File

@ -219,6 +219,13 @@ and the return status of the call should be tested for failure.
This will ensure that the program does not continue blindly
in the event that an attacker has already created the file
with the intention of manipulating or reading its contents.
.Pp
The implementation of these functions calls
.Xr arc4random 3 ,
which is not reentrant.
You must provide your own locking around this and other consumers of the
.Xr arc4random 3
API.
.Sh SEE ALSO
.Xr chmod 2 ,
.Xr getpid 2 ,