objdump still uses /tmp insecurely

Joseph S. Myers jsm28@cam.ac.uk
Mon May 8 05:57:00 GMT 2000


objdump sometimes opens temporary files without using O_EXCL.

Testcase: strace objdump -i

Fix: avoid using the deprecated choose_temp_base() from libiberty.  
libiberty provides secure temporary file interfaces as well.

Workaround: always set TMPDIR to a non-world-writable directory.

-- 
Joseph S. Myers
jsm28@cam.ac.uk



More information about the Binutils mailing list