PSPP-BUG: [bug #15723] HTML driver creates .png files insecurely

[Ben Pfaff]

URL:
  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=15723>

                 Summary: HTML driver creates .png files insecurely
                 Project: PSPP
            Submitted by: blp
            Submitted on: Sun 02/12/06 at 09:38
                Category: Output Driver
                Severity: 7 - Major
                  Status: None
             Assigned to: None
             Open/Closed: Open
                 Release: None
                  Effort: 0.00

    _______________________________________________________

Details:

The HTML driver creates .png files in /tmp in predictable names without using
O_EXCL, so it is a security hole.  It should instead use O_EXCL or create them
in the same directory as the .html file.






    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?func=detailitem&item_id=15723>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/