diff options
| author | David Sommerseth <dazo@users.sourceforge.net> | 2010-04-16 22:02:36 +0200 |
|---|---|---|
| committer | David Sommerseth <dazo@users.sourceforge.net> | 2010-10-21 11:37:03 +0200 |
| commit | 4e1cc5f6dda22e9ff121d3753066775c25448bcc (patch) | |
| tree | d58ab37fedc0795d2b4c75b4f500a66e1aa415e6 /ieproxy.c | |
| parent | Make use of counter_type instead of int when counting bytes and network packets (diff) | |
| download | openvpn-4e1cc5f6dda22e9ff121d3753066775c25448bcc.tar.xz | |
Harden create_temp_filename() (version 2)
By hardening the create_temp_filename() function to check if the generated
filename exists and to create the temp file with only S_IRUSR|S_IWUSR bit
files set before calling the script, it should become even more difficult to
exploit such a scenario.
After a discussion on the mailing list, Fabian Knittel provided an enhanced
version of the inital patch which is added to this patch.
This patch also renames create_temp_filename() to create_temp_file(), as this
patch also creates the temporary file. The function returns the filename of the
created file, or NULL on error.
Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
Signed-off-by: Fabian Knittel <fabian.knittel@avona.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'ieproxy.c')
0 files changed, 0 insertions, 0 deletions