Re: LYNX-DEV VU#5135 (Lynx vulnerability?) (fwd)

[T.E.Dickey]

> PS: I didn't see any response to my comment 2 weeks ago that "the
>     sequence open-then-chmod tends to open race conditions which can
>     lead to security holes".  Was it received?
I don't remember seeing the comment - but I've been working on a
merge/resync, and, yes I noticed it (perhaps whoever initiated that change
doesn't understand how to use umask).

-- A better solution (which I'll keep in mind for _after_ merging) is using
   a wrapper for fopen (i.e., open/fdopen) that'll allow the proper
   semantics.

-- 
Thomas E. Dickey
address@hidden
http://www.clark.net/pub/dickey
;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;