unsecure tmp file creation

Dirk Mueller mueller at kde.org
Thu Jun 19 16:45:23 CEST 2003


Hi, 

konq-embed/dropin/kparts/part.cpp revision 1.8:

revision 1.8
date: 2003/02/03 15:59:21;  author: montanaro;  state: Exp;  lines: +128 -21
Updated konq-embed to work with kdelibs v3.0
The browser, with the X11 front-end is basically working.
The addons in particular are mostly untested.


This commit introduced this code:

    m_file.prepend( QString::fromLatin1( "/tmp/.konqe-part-" ) );
    m_tempFile.setName( m_file );
    if ( !m_tempFile.open( IO_ReadWrite ) )

which is unsecure temp file creation par excellence. 

Please fix it ASAP. 


-- 
Dirk


More information about the konq-e mailing list