emacs-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Finalizing 'inhibit-automatic-native-compilation'


From: Stefan Monnier
Subject: Re: Finalizing 'inhibit-automatic-native-compilation'
Date: Mon, 13 Feb 2023 18:04:42 -0500
User-agent: Gnus/5.13 (Gnus v5.13)

> Mmmh, we already use the `make-temp-file' machinery anyway for every
> compilation, but to understand if this is sufficient or doesn't help at
> all, I should understand more on why using `temporary-file-directory' is
> dangerous and in which context.

`temporary-file-directory' may point to a world-writable directory, so
it's vulnerable to the usual race condition where someone manages to
predict the name of the file you're going to write and places there
a symlink to some "interesting" place, so you end up overwriting some
other file unwittingly.


        Stefan




reply via email to

[Prev in Thread] Current Thread [Next in Thread]