On 2011-09-06 14:05:59 +0200, Chung-chieh Shan wrote: > No, we should not assume that TMPDIR is set by a malicious agent; that > is possible but it is also possible that TMPDIR is set by a friendly > agent whose goal is to increase the security of the system by putting > temporary files in a secure place inacessible to other, malicious users. > > The correct thing to do is to respect the setting of TMPDIR precisely. > If the value of TMPDIR contains any special characters, xpdf should put > any temporary files in that directory, whose name contains the same > special characters. That is what is achieved by Jonathan Nieder's fix
The fix is fine; however $TMPDIR should not contain spaces and other special characters because various tools don't support them (starting with the autotools). Of course, it's better to have a program that works correctly even in the case where $TMPDIR has special characters. -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <http://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / Arénaire project (LIP, ENS-Lyon) -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
