Re: Possible make_oidjoins_check Security Issue

From: Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Neil Conway <neilc(at)samurai(dot)com>, Rod Taylor <pg(at)rbt(dot)ca>, PostgreSQL Development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Possible make_oidjoins_check Security Issue
Date: 2004-10-20 05:42:46
Message-ID: 20041020054246.GA15852@dcc.uchile.cl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

On Wed, Oct 20, 2004 at 12:31:11AM -0400, Tom Lane wrote:
> Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl> writes:
> > Better, use mktemp(1). The thread testing script already does it IIRC.
>
> There are only two uses of mktemp(1) in our source tree: configure and
> config.guess. Both were gotten from elsewhere, and both jump through
> some seriously unreadable hoops in order to achieve allegedly-portable
> behavior.

Huh, right. I was remembering mkstemp(3), which is used in the thread
test (which is not a script after all ...)

config.guess usage surely is ugly ...

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
"Porque francamente, si para saber manejarse a uno mismo hubiera que
rendir examen... ¿Quién es el machito que tendría carnet?" (Mafalda)

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2004-10-20 11:54:27 Re: Possible make_oidjoins_check Security Issue
Previous Message Tom Lane 2004-10-20 04:31:11 Re: Possible make_oidjoins_check Security Issue

Browse pgsql-patches by date

  From Date Subject
Next Message Peter Eisentraut 2004-10-20 10:15:10 Re: pg_regress --temp-keep
Previous Message Tom Lane 2004-10-20 04:31:11 Re: Possible make_oidjoins_check Security Issue