* Bug #15213, #18635: The use of the insecure m_scratch() and
authorEarl Hood <earl@earlhood.com>
Thu, 4 Feb 2010 01:39:21 +0000 (01:39 +0000)
committerEarl Hood <earl@earlhood.com>
Thu, 4 Feb 2010 01:39:21 +0000 (01:39 +0000)
commit2f689a1cb907a5de04e6d39ffd217a69af3216c7
tree0d7ff07ec09c1c2ca2872fe3bec2157231a0003f
parent352fe458a57061db81240c19fa4b356c7448463b
* Bug #15213, #18635: The use of the insecure m_scratch() and
  m_tmpfil() functions have been replaced by m_mktemp()
  or m_mktemp2() functions (defined in sbr/m_mktemp.c).
  The new functions use mkstemp() to securely create
  temporary files to avoid the numerous race conditions
  that exist with the old functions.  This does assume
  that mkstemp() is available.  Unsure if we need to
  create an alternative implementation if mkstemp() is
  not available.  More information about new temp file
  functions in m_mktemp.c, including the support for
  MHTMPDIR, TMPDIR, and TMP envvars.

NOTE: The files sbr/m_scratch.c and sbr/m_tmpfil.c should be removed.
Until more testing verifies changes to support new functions have not
broken functionality, the files are be left in the tree, but comments
have been added stating the functions in them should not be called.
39 files changed:
ChangeLog
etc/Makefile.in
h/prototypes.h
sbr/Makefile.in
sbr/fmt_rfc2047.c
sbr/fmt_scan.c
sbr/getarguments.c
sbr/m_mktemp.c [new file with mode: 0644]
sbr/m_scratch.c
sbr/m_tmpfil.c
sbr/pidwait.c
uip/annosbr.c
uip/burst.c
uip/distsbr.c
uip/forw.c
uip/inc.c
uip/mhbuild.c
uip/mhbuildsbr.c
uip/mhlsbr.c
uip/mhmail.c
uip/mhoutsbr.c
uip/mhparse.c
uip/mhstoresbr.c
uip/msh.c
uip/mshcmds.c
uip/new.c
uip/popsbr.c
uip/post.c
uip/prompter.c
uip/rcvdist.c
uip/rcvstore.c
uip/rcvtty.c
uip/scansbr.c
uip/send.c
uip/sendsbr.c
uip/show.c
uip/slocal.c
uip/viamail.c
uip/whatnowsbr.c