Ethereal-dev: Re: [Ethereal-dev] Re: [Ethereal-cvs] cvs commit: ethereal/gtk file_dlg.c follow

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Sat, 26 Jun 2004 03:14:42 +0200
On Fri, Jun 25, 2004 at 07:24:14PM +0200, Ulf Lamping wrote:
> >   gtk                  file_dlg.c follow_dlg.c main.c 
> >                        print_dlg.c 
> > Log:
> > tmpnam() really should not be used for security reasons.
> > Replace it where used and update README.developer accordingly.

> Hmmm, when looking into mkstemp.c, the return value from the function 
> mkstemp() is an opened file descriptor for reading and writing, while 
> tmpnam() returns only the filename.
> 
> Your changes just don't work!!!

Ouch! OK, I'll look at it after I get up again.

 Thanks!
     Joerg

-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.