[FFmpeg-devel] [PATCH] wrap mkstemp with umask

Erik Hovland erik
Thu Jul 17 21:28:45 CEST 2008


It is possible that the current umask of the process creating the file
with mkstemp is such that the temp file could be writable by others then
the user. When mkstemp is used it can be wrapped with umask() calls to
make absolutely sure that the temp file cannot be tampered with.

E

-- 
Erik Hovland
mail: erik at hovland.org
web: http://hovland.org/
PGP/GPG public key available on request
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ffmpeg-extra-secure-mkstemp.patch
Type: text/x-diff
Size: 1665 bytes
Desc: not available
URL: <http://lists.mplayerhq.hu/pipermail/ffmpeg-devel/attachments/20080717/f6eed6e0/attachment.patch>



More information about the ffmpeg-devel mailing list