[boost] Re: Serialization and tmpnam

From: Miro Jurisic (macdev_at_[hidden])
Date: 2004-07-16 23:28:04

In article <009c01c46bb4$22145660$02fea8c0_at_eldiener>,
 "Eddie Diener" <eddielee_at_[hidden]> wrote:

> The main danger of tmpnam is not that someone else may use the name, since a
> new unique name is returned each time, but rather that one may not have the
> rights to create a file in the current directory. 

No, the main danger of tmpnam is that using tmpnam forces you into a situation 
where you have a race condition that opens a security hole. 
<http://www.suse.co.uk/uk/private/support/online_help/howto/secprog/secprog3.html
> has a good description of the problem.

meeroh

-- 
If this message helped you, consider buying an item
from my wish list: <http://web.meeroh.org/wishlist>