Re: Possible make_oidjoins_check Security Issue

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl>
Cc: Neil Conway <neilc(at)samurai(dot)com>, Rod Taylor <pg(at)rbt(dot)ca>, PostgreSQL Development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Possible make_oidjoins_check Security Issue
Date: 2004-10-20 04:31:11
Message-ID: 29923.1098246671@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl> writes:
> Better, use mktemp(1). The thread testing script already does it IIRC.

There are only two uses of mktemp(1) in our source tree: configure and
config.guess. Both were gotten from elsewhere, and both jump through
some seriously unreadable hoops in order to achieve allegedly-portable
behavior. mktemp(1) is simply not portable :-( ... the Single Unix Spec
refuses to touch it at all ...

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Alvaro Herrera 2004-10-20 05:42:46 Re: Possible make_oidjoins_check Security Issue
Previous Message Tom Lane 2004-10-20 04:11:12 Re: Possible make_oidjoins_check Security Issue

Browse pgsql-patches by date

  From Date Subject
Next Message Alvaro Herrera 2004-10-20 05:42:46 Re: Possible make_oidjoins_check Security Issue
Previous Message Tom Lane 2004-10-20 04:11:12 Re: Possible make_oidjoins_check Security Issue