[Boost-users] Re: boost::filesystem - no create_file or create_tmp_file?

Russell Hind wrote:

Vladimir Prus wrote:

...

Sure, that's the complexity in creating temporary file. On Linux, you can

open(..., O_EXCL....)

but then how do you get ifstream out of file descriptor. Surely, there's in g++ 3.2+, but for other compilers one has to find other solutions. I indend to try, but not now.

Would it be so bad to use the platform independent way to create the file, and if that suceeeds, close it and then re-open it using the ofstream?

Between closing the file and reopening it, somebody can delete the file and create another one. So your original "does not exist" check is lost in vain. More details here: http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/avoid-race.htm... - Volodya