diff options
| author | David Sommerseth <dazo@users.sourceforge.net> | 2010-04-16 22:02:36 +0200 |
|---|---|---|
| committer | David Sommerseth <dazo@users.sourceforge.net> | 2010-04-29 20:22:29 +0200 |
| commit | cb042f8eb2de4908072f3b1c11149d60a74eae28 (patch) | |
| tree | f42e95dd5217bf00e2828bbd459cee706668ff60 /mtcp.c | |
| parent | Make use of counter_type instead of int when counting bytes and network packets (diff) | |
| download | openvpn-cb042f8eb2de4908072f3b1c11149d60a74eae28.tar.xz | |
Harden create_temp_filename() (version 2)
By hardening the create_temp_filename() function to check if the generated
filename exists and to create the temp file with only S_IRUSR|S_IWUSR bit
files set before calling the script, it should become even more difficult to
exploit such a scenario.
After a discussion on the mailing list, Fabian Knittel provided an enhanced
version of the inital patch which is added to this patch.
This patch also renames create_temp_filename() to create_temp_file(), as this
patch also creates the temporary file. The function returns the filename of the
created file, or NULL on error.
Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
Signed-off-by: Fabian Knittel <fabian.knittel@avona.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'mtcp.c')
0 files changed, 0 insertions, 0 deletions