diff options
| author | Romain Francoise <romain@orebokech.com> | 2008-04-18 18:24:29 +0000 |
|---|---|---|
| committer | Romain Francoise <romain@orebokech.com> | 2008-04-18 18:24:29 +0000 |
| commit | 95de358c3050d1e0162238bbafe05cd598193640 (patch) | |
| tree | f7242208685fb503ca9de079a342a65f003f0543 /lib-src | |
| parent | 8a7d9183284d1bb24525df36d452777e70193bb4 (diff) | |
| download | emacs-95de358c3050d1e0162238bbafe05cd598193640.tar.gz | |
2008-04-18 Steve Grubb <sgrubb@redhat.com> (tiny change)
* vcdiff: Use mktemp (CVE-2008-1694).
Diffstat (limited to 'lib-src')
| -rw-r--r-- | lib-src/ChangeLog | 4 | ||||
| -rwxr-xr-x | lib-src/vcdiff | 4 |
2 files changed, 6 insertions, 2 deletions
diff --git a/lib-src/ChangeLog b/lib-src/ChangeLog index f03217b662d..86448ddbde6 100644 --- a/lib-src/ChangeLog +++ b/lib-src/ChangeLog @@ -1,3 +1,7 @@ +2008-04-18 Steve Grubb <sgrubb@redhat.com> (tiny change) + + * vcdiff: Use mktemp (CVE-2008-1694). + 2008-04-09 Jason Rumney <jasonr@gnu.org> * makefile.w32-in (distclean, maintainer-clean): New targets. diff --git a/lib-src/vcdiff b/lib-src/vcdiff index 86b80bcdacd..cb977709db0 100755 --- a/lib-src/vcdiff +++ b/lib-src/vcdiff @@ -84,14 +84,14 @@ do case $f in s.* | */s.*) if - rev1=/tmp/geta$$ + rev1=`mktemp /tmp/geta.XXXXXXXX` get -s -p -k $sid1 "$f" > $rev1 && case $sid2 in '') workfile=`expr " /$f" : '.*/s.\(.*\)'` ;; *) - rev2=/tmp/getb$$ + rev2=`mktemp /tmp/getb.XXXXXXXX` get -s -p -k $sid2 "$f" > $rev2 workfile=$rev2 esac |