From 95de358c3050d1e0162238bbafe05cd598193640 Mon Sep 17 00:00:00 2001 From: Romain Francoise Date: Fri, 18 Apr 2008 18:24:29 +0000 Subject: [PATCH] 2008-04-18 Steve Grubb (tiny change) * vcdiff: Use mktemp (CVE-2008-1694). --- lib-src/ChangeLog | 4 ++++ lib-src/vcdiff | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/lib-src/ChangeLog b/lib-src/ChangeLog index f03217b662..86448ddbde 100644 --- a/lib-src/ChangeLog +++ b/lib-src/ChangeLog @@ -1,3 +1,7 @@ +2008-04-18 Steve Grubb (tiny change) + + * vcdiff: Use mktemp (CVE-2008-1694). + 2008-04-09 Jason Rumney * makefile.w32-in (distclean, maintainer-clean): New targets. diff --git a/lib-src/vcdiff b/lib-src/vcdiff index 86b80bcdac..cb977709db 100755 --- a/lib-src/vcdiff +++ b/lib-src/vcdiff @@ -84,14 +84,14 @@ do case $f in s.* | */s.*) if - rev1=/tmp/geta$$ + rev1=`mktemp /tmp/geta.XXXXXXXX` get -s -p -k $sid1 "$f" > $rev1 && case $sid2 in '') workfile=`expr " /$f" : '.*/s.\(.*\)'` ;; *) - rev2=/tmp/getb$$ + rev2=`mktemp /tmp/getb.XXXXXXXX` get -s -p -k $sid2 "$f" > $rev2 workfile=$rev2 esac -- 2.20.1