[FFmpeg-devel] [RFC] av_tempfile()
Reimar.Doeffinger at gmx.de
Sun Oct 16 22:19:44 CEST 2011
On 16 Oct 2011, at 22:09, Michael Niedermayer <michaelni at gmx.at> wrote:
>> Note: if they were to somehow block /tmp it even allows creating files
>> with arbitrary content in the current directory.
>> Which is one step closer to allowing it to be executed (can't think of
>> way right now, Windows likes executing stuff in "." but does not like
>> things without the proper extensions, Linux wants execute flag and
>> usually does not look in ".", but still...)
> anything i should change in the code ?
I would suggest removing the "." fallback, but then the mkstemp version would break on any system without tmp (e.g. if there's some mingw with mkstemp), without any workaround possible.
More information about the ffmpeg-devel