mirrors/cpython
1
0
Fork 0
mirror of https://github.com/python/cpython.git synced 2025-09-26 18:29:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

added warnings about security risk of using tmpnam and tempnam

Browse source
This commit is contained in:
Skip Montanaro 2001-08-18 18:52:10 +00:00
parent 50d756e262
commit 95618b5bc9
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
Modules/posixmodule.c
View file

@ -4211,6 +4211,11 @@ posix_tempnam(PyObject *self, PyObject *args)
if (!PyArg_ParseTuple(args, "|zz:tempnam", &dir, &pfx)) if (!PyArg_ParseTuple(args, "|zz:tempnam", &dir, &pfx))
return NULL; return NULL;
if (PyErr_Warn(PyExc_RuntimeWarning,
"tempnam is a potential security risk to your program") < 0)
return NULL;
#ifdef MS_WIN32 #ifdef MS_WIN32
name = _tempnam(dir, pfx); name = _tempnam(dir, pfx);
#else #else
@ -4258,6 +4263,11 @@ posix_tmpnam(PyObject *self, PyObject *args)
if (!PyArg_ParseTuple(args, ":tmpnam")) if (!PyArg_ParseTuple(args, ":tmpnam"))
return NULL; return NULL;
if (PyErr_Warn(PyExc_RuntimeWarning,
"tmpnam is a potential security risk to your program") < 0)
return NULL;
#ifdef USE_TMPNAM_R #ifdef USE_TMPNAM_R
name = tmpnam_r(buffer); name = tmpnam_r(buffer);
#else #else