You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2005/01/21 23:40:20 UTC

DO NOT REPLY [Bug 30385] - the use of `tmpnam' is dangerous, better use `mkstemp'

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=30385>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=30385





------- Additional Comments From minfrin@apache.org  2005-01-21 23:40 -------
According to the APR docs for apr_global_mutex_create():

fname 	A file name to use if the lock mechanism requires one. This argument
should always be provided. The lock code itself will determine if it should be used.

So the compiler claims tmpnam() is evil, but all the alternatives involve
actually opening a file, which isn't what we need.

Does APR have a temp file creation function? Are the APR docs above about the
argument always being provided correct, or is it really safe to pass NULL to
this function on all platforms?


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org