Boost logo

Boost :

From: Miro Jurisic (macdev_at_[hidden])
Date: 2004-07-16 23:28:04


In article <009c01c46bb4$22145660$02fea8c0_at_eldiener>,
 "Eddie Diener" <eddielee_at_[hidden]> wrote:

> The main danger of tmpnam is not that someone else may use the name, since a
> new unique name is returned each time, but rather that one may not have the
> rights to create a file in the current directory.

No, the main danger of tmpnam is that using tmpnam forces you into a situation
where you have a race condition that opens a security hole.
<http://www.suse.co.uk/uk/private/support/online_help/howto/secprog/secprog3.html
> has a good description of the problem.

meeroh

-- 
If this message helped you, consider buying an item
from my wish list: <http://web.meeroh.org/wishlist>

Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk