This is the mail archive of the binutils@sourceware.cygnus.com mailing list for the binutils project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]

objdump still uses /tmp insecurely


objdump sometimes opens temporary files without using O_EXCL.

Testcase: strace objdump -i

Fix: avoid using the deprecated choose_temp_base() from libiberty.  
libiberty provides secure temporary file interfaces as well.

Workaround: always set TMPDIR to a non-world-writable directory.

-- 
Joseph S. Myers
jsm28@cam.ac.uk


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]