[FFmpeg-devel] [RFC] av_tempfile()

Michael Niedermayer michaelni at gmx.at
Sun Oct 16 22:35:44 CEST 2011


On Sun, Oct 16, 2011 at 10:19:44PM +0200, Reimar Döffinger wrote:
> On 16 Oct 2011, at 22:09, Michael Niedermayer <michaelni at gmx.at> wrote:
> >> Note: if they were to somehow block /tmp it even allows creating files
> >> with arbitrary content in the current directory.
> >> Which is one step closer to allowing it to be executed (can't think of
> >> way right now, Windows likes executing stuff in "." but does not like
> >> things without the proper extensions, Linux wants execute flag and
> >> usually does not look in ".", but still...)
> > 
> > anything i should change in the code ?
> 
> I would suggest removing the "." fallback, but then the mkstemp version would break on any system without tmp (e.g. if there's some mingw with mkstemp), without any workaround possible.

added some ifdeffery

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Avoid a single point of failure, be that a person or equipment.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20111016/8efe6708/attachment.asc>


More information about the ffmpeg-devel mailing list