[FFmpeg-devel] [RFC] av_tempfile()

Reimar Döffinger Reimar.Doeffinger at gmx.de
Sun Oct 16 22:19:44 CEST 2011


On 16 Oct 2011, at 22:09, Michael Niedermayer <michaelni at gmx.at> wrote:
>> Note: if they were to somehow block /tmp it even allows creating files
>> with arbitrary content in the current directory.
>> Which is one step closer to allowing it to be executed (can't think of
>> way right now, Windows likes executing stuff in "." but does not like
>> things without the proper extensions, Linux wants execute flag and
>> usually does not look in ".", but still...)
> 
> anything i should change in the code ?

I would suggest removing the "." fallback, but then the mkstemp version would break on any system without tmp (e.g. if there's some mingw with mkstemp), without any workaround possible.
> 


More information about the ffmpeg-devel mailing list