[Bug libc/15813] Multiple issues in __gen_tempname

[carlos at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=15813

--- Comment #11 from Carlos O'Donell <carlos at redhat dot com> ---
(In reply to Adhemerval Zanella from comment #10)
> I meant the updated gnulib version from its repository, not the outdated
> version glibc packs now.  The gnulib version currently does not use neither
> the process pid nor the clock for source of entropy, it uses either
> getrandom or a simple linear congruential generator if getrandom fails.
> 
> I think using getentropy where available should make it more robust. These
> interface contains inherent concurrent issues and applications should either
> use O_TMPFILE or at leat tmpfile.

We should backport this to the release branch also since this is a regression.

-- 
You are receiving this mail because:
You are on the CC list for the bug.