From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ulrich Mueller Newsgroups: gmane.emacs.devel Subject: Re: temp file hole? Date: Fri, 5 Oct 2007 09:14:11 +0200 Message-ID: <18181.58435.635116.551677@a1ihome1.kph.uni-mainz.de> References: NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1191568495 16448 80.91.229.12 (5 Oct 2007 07:14:55 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 5 Oct 2007 07:14:55 +0000 (UTC) Cc: emacs@gentoo.org, Stefan Monnier , emacs-devel@gnu.org To: Michael Albinus Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri Oct 05 09:14:52 2007 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by lo.gmane.org with esmtp (Exim 4.50) id 1IdhOc-0003XL-V9 for ged-emacs-devel@m.gmane.org; Fri, 05 Oct 2007 09:14:51 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IdhOY-0002af-1O for ged-emacs-devel@m.gmane.org; Fri, 05 Oct 2007 03:14:46 -0400 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1IdhOU-0002aa-BM for emacs-devel@gnu.org; Fri, 05 Oct 2007 03:14:42 -0400 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1IdhOQ-0002aL-UI for emacs-devel@gnu.org; Fri, 05 Oct 2007 03:14:42 -0400 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1IdhOQ-0002aI-P2 for emacs-devel@gnu.org; Fri, 05 Oct 2007 03:14:38 -0400 Original-Received: from mx20.gnu.org ([199.232.41.8]) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1IdhOQ-00067H-GY for emacs-devel@gnu.org; Fri, 05 Oct 2007 03:14:38 -0400 Original-Received: from a1iwww1.kph.uni-mainz.de ([134.93.134.1]) by mx20.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1IdhOM-0002ra-Eo for emacs-devel@gnu.org; Fri, 05 Oct 2007 03:14:34 -0400 Original-Received: from a1ihome1.kph.uni-mainz.de (a1ihome1.kph.uni-mainz.de [134.93.134.75]) by a1iwww1.kph.uni-mainz.de (8.13.4/8.13.4) with ESMTP id l957ECv4024149; Fri, 5 Oct 2007 09:14:12 +0200 Original-Received: from a1ihome1.kph.uni-mainz.de (localhost [127.0.0.1]) by a1ihome1.kph.uni-mainz.de (8.14.1/8.14.1) with ESMTP id l957ECd8006445; Fri, 5 Oct 2007 09:14:12 +0200 Original-Received: (from ulm@localhost) by a1ihome1.kph.uni-mainz.de (8.14.1/8.14.1/Submit) id l957EBen006439; Fri, 5 Oct 2007 09:14:11 +0200 In-Reply-To: X-Mailer: VM 8.0.2-487 under Emacs 22.1.1 (i686-pc-linux-gnu) X-detected-kernel: Linux 2.6, seldom 2.4 (older, 4) X-Detected-Kernel: Linux 2.6, seldom 2.4 (older, 4) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:80266 Archived-At: >>>>> On Thu, 04 Oct 2007, Michael Albinus wrote: > And you are right, there could be a security hole. > [...] > A similar approach should be applied to tramp-make-tramp-temp-file, > which suffers from this security hole since ever. > I'll commit a patch tonight (or tomorrow, depends on my spare time). I noticed that a patch for tramp-make-temp-file was committed, but tramp-make-tramp-temp-file is unchanged. Does this mean that the latter is not suffering from the problem? Ulrich