posix/wordexp-tst.sh
Joseph S. Myers
jsm28@cam.ac.uk
Mon Oct 9 15:45:00 GMT 2000
posix/wordexp-tst.sh leaves its output files behind in TMPDIR after
running, if TMPDIR is set. If TMPDIR were set to a shared directory for
some reason (e.g. set to /var/tmp because of /tmp being full), the usual
symlink attacks also apply.
Suggested fix: always create the wordexp-test-result files in the build
directory; ignore TMPDIR. "make clean" will remove them from there so
there's no need for the script to clean them up itself.
--
Joseph S. Myers
jsm28@cam.ac.uk
More information about the Libc-alpha
mailing list