tmpnam v mkstemp

Geoff Keating geoffk@geoffk.org
Sat Nov 11 13:47:00 GMT 2000


> From: Neale.Ferguson@softwareAG-usa.com
> Date:   Sat, 11 Nov 2000 16:21:43 +0200
> 
> What is the nature of the warning issued:
> xxxxxxxxx.so: the use of `tmpnam' is dangerous, better use `mkstemp'

It is a libc link-time warning.  I think the meaning of the warning is
clear.  The warning is because use of tmpnam() can allow another user
to overwrite files owned by the user running tmpnam() even if the
other user cannot write to those files.

-- 
- Geoffrey Keating <geoffk@geoffk.org>


More information about the Libc-alpha mailing list