Package: trac
Version: 0.8.4-1
Severity: normal

Some http requests for changesets leave temporary files in /tmp, and
some of those are never cleaned up.  The temporary files have names
like /tmp/tmpXXXXXX and are always generated in pairs; one of the files
in the pair is empty, and the other appears to contain a copy of a file
from the repository.

My amateur guess as to the cause is that perhaps NaivePopen() (in
util.py) fails after creating outfile and infile, but before they
can be removed.  There seems to be no exception handler to catch this
case.  To my new-to-Python eye at least, it looks like this can be
fixed by replacing the call to tempfile.mktemp() with either
NamedTemporaryFile() or TemporaryFile().  That would kill two birds with
one stone: it would avoid double-creation bugs (a minor security hazard)
and delete the files automatically after use.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (50, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages trac depends on:
ii  python                        2.3.5-2    An interactive high-level object-o
ii  python-clearsilver            0.9.13-3.2 python bindings for clearsilver
ii  python-sqlite                 1.0.1-2    python interface to SQLite
ii  python2.3-subversion          1.2.0-1    python modules for interfacing wit
ii  subversion                    1.1.4-2    advanced version control system (a

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to