Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-10 03:45:46 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Use mkstemp instead of tempnam. Potential security issue.

Browse Source 
Bug #173178 r=syd sr=dveditz
This commit is contained in:
seawood%netscape.com 2002-12-11 14:50:15 +00:00
parent d96051a4a2
commit 6eb85d1769
1 changed files with 20 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
xpinstall/wizard/unix/src2/nsXIEngine.cpp
View File

@ -549,15 +549,27 @@ int
nsXIEngine::MakeUniqueTmpDir()
{
int err = E_DIR_CREATE;
mTmp = tempnam( (const char *) NULL, "xpi" );
if ( mTmp != (char *) NULL ) {
int tmperr;
tmperr = mkdir(mTmp, 0755);
if ( tmperr != -1 )
err = OK;
char tmpnam[MAXPATHLEN];
char *tmpdir = getenv("TMPDIR");
if (!tmpdir) tmpdir = getenv("TMP");
if (!tmpdir) tmpdir = getenv("TEMP");
if (!tmpdir) tmpdir = P_tmpdir;
snprintf(tmpnam, sizeof(tmpnam), "%s/xpi.XXXXXX", tmpdir);
#ifdef HAVE_MKDTEMP
if (mkdtemp(tmpnam)) {
mTmp = strdup(tmpnam);
if (mTmp) err = OK;
}
#else
int fd = mkstemp(tmpnam);
if (fd < 0) return err;
close(fd);
if (unlink(tmpnam) < 0) return err;
mTmp = strdup(tmpnam);
if (!mTmp) return err;
if (mkdir(mTmp, 0755) < 0) return err;
err = OK;
#endif
return err;
}