Bug#538330: groff: pdfroff uses (and documents!) insecure temporary files

[Nico Golde]

Hi,
patch attached.

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

--- pdfroff.sh	2009-08-09 16:04:10.000000000 +0200
+++ pdfroff.sh.new	2009-08-09 16:10:53.000000000 +0200
@@ -137,7 +137,7 @@
 #
 # Set up temporary/intermediate file locations.
 #
-  WRKFILE=${GROFF_TMPDIR=${TMPDIR-${TMP-${TEMP-"."}}}}/pdf$$.tmp
+  WRKFILE=${GROFF_TMPDIR=$(mktemp -t -d groffXXXXXX)}/pdf$$.tmp
 #
   REFCOPY=${GROFF_TMPDIR}/pdf$$.cmp
   REFFILE=${GROFF_TMPDIR}/pdf$$.ref

pgpb7BbAoSRPx.pgp
Description: PGP signature