Re: [Qemu-devel] [oss-security] QEMU 2.3.0 tmp vulns CVE request

2015-05-16 Thread Jakub Wilk
* Michael Tokarev , 2015-05-16, 11:45: ./net/slirp.c: snprintf(s->smb_dir, sizeof(s->smb_dir), "/tmp/qemu-smb.%ld-%d", (long)getpid(), instance++); This one is real, used for -smb argument, to start smbd, making its configuration. Maybe tmpnam() should be used here. "Never us

Re: [Qemu-devel] [oss-security] QEMU 2.3.0 tmp vulns CVE request

2015-05-16 Thread Michael Tokarev
[Adding Cc qemu-devel@] 13.05.2015 19:23, Kurt Seifried wrote: > So some suspicious looking tmp usage in qemu (I excluded the test > scripts and builds scripts, they were rife with problems so hopefully > people only build in trusted environments). > > Additionally there will no doubt be further