17 Jul
2004
17 Jul
'04
4:28 a.m.
In article <009c01c46bb4$22145660$02fea8c0@eldiener>, "Eddie Diener" <eddielee@tropicsoft.com> wrote:
The main danger of tmpnam is not that someone else may use the name, since a new unique name is returned each time, but rather that one may not have the rights to create a file in the current directory.
No, the main danger of tmpnam is that using tmpnam forces you into a situation where you have a race condition that opens a security hole. <http://www.suse.co.uk/uk/private/support/online_help/howto/secprog/secprog3....
has a good description of the problem.
meeroh -- If this message helped you, consider buying an item from my wish list: <http://web.meeroh.org/wishlist>