Fri Sep 2 23:44:37 CEST 2005 Jochen Eisinger <c0ffee@penguin-breeder.org>

	* Fixed the insecure temporary file creation issue now that it's
	  even on bugtraq... Affected file apps/silcd/silcd.c

diff --git a/CHANGES b/CHANGES
index cd20f109d628f9ccccba9f368dde53b750df4b67..ee11e78b1483e3036d7359db9e05d39c0c1d11d5 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+Fri Sep  2 23:44:37 CEST 2005  Jochen Eisinger <c0ffee@penguin-breeder.org>
+
+       * Fixed the insecure temporary file creation issue now that it's
+         even on bugtraq... Affected file apps/silcd/silcd.c
+
 Wed Aug 24 18:27:48 CEST 2005  Patrik Weiskircher <pat@icore.at>
 
        * Before creating a channel key we need to remove the private key

diff --git a/apps/silcd/silcd.c b/apps/silcd/silcd.c
index 9c02f13af4b36ca99172b19304e4ac5ae4fff795..a727f2a90bfb0ae072c590bb72e0b69ecd16ec9b 100644 (file)
--- a/apps/silcd/silcd.c
+++ b/apps/silcd/silcd.c
@@ -264,8 +264,8 @@ SILC_TASK_CALLBACK(dump_stats)
   char filename[256];
 
   memset(filename, 0, sizeof(filename));
-  snprintf(filename, sizeof(filename) - 1, "/tmp/silcd.%d.stats", getpid());
-  fdd = fopen(filename, "w+");
+  snprintf(filename, sizeof(filename) - 1, "/tmp/silcd.%d.stats-XXXXXX", getpid());
+  fdd = mkstemp(filename);
   if (!fdd)
     return;