Bug#787963: wdiff: please don't use the same node name two times

On Fri, Sep 15, 2023 at 01:58:50PM +0200, Santiago Vila wrote: > Some time ago I received (via clone & reassign), the following report from > the Debian bug system: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787963 > > To summarize: The command: > > info wdiff > > jumps into the Inv

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

On Tue, Jun 17, 2008 at 1:26 PM, Nico Golde <[EMAIL PROTECTED]> wrote: > * Denver Gingerich <[EMAIL PROTECTED]> [2008-06-17 19:20]: >> On Tue, Jun 17, 2008 at 12:17 PM, Nico Golde <[EMAIL PROTECTED]> wrote: >> > [...] >> >> Secondly, the manpag

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

On Tue, Jun 17, 2008 at 12:17 PM, Nico Golde <[EMAIL PROTECTED]> wrote: > [...] >> Secondly, the manpage for mkstemp has the following note: "Don't use >> this function, use tmpfile(3) instead.". > > What manpage do you have there? At least this is not the > case in the posix manuals I have. This

Bug#425254: wdiff: unsafe use of tmpnam: symlink attack

On Tue, Jun 17, 2008 at 7:40 AM, Santiago Vila <[EMAIL PROTECTED]> wrote: > Denver: Please tell me if you consider this patch acceptable to fix > the insecure use of tmpnam, as I plan to apply it to the Debian > version of wdiff: > > diff -ru wdiff-0.5.original/wdiff.c wdiff-0.5/wdiff.c > --- wdiff