On Wed, Jul 18, 2007 at 10:07:27AM +0200, Michael Schroeder wrote:
> On Wed, Jul 18, 2007 at 02:04:11AM +0400, Dmitry V. Levin wrote:
> > No, please do not apply this change.
> > The problem is real, so let linker warnings remind us about this issue.
> The problem is *not* real, close(mkstemp()) looks a bit strange, but
> is sane.

The issue is not only how secure temporary files are created, but also
whether environment is secure enough to pass temp files by their names
to external executables.


-- 
ldv