Not logged in
Log in now
Create an account
Subscribe to LWN
LWN.net Weekly Edition for December 5, 2013
Deadline scheduling: coming soon?
LWN.net Weekly Edition for November 27, 2013
ACPI for ARM?
LWN.net Weekly Edition for November 21, 2013
Tuesday's security updates
Posted Jul 25, 2013 9:17 UTC (Thu) by epa (subscriber, #39769)
Posted Jul 28, 2013 18:11 UTC (Sun) by jzbiciak (✭ supporter ✭, #5246)
Well, by point of comparison, mkdtemp only takes a 6 character suffix, and I imagine that's far more constrained than the 6 bytes the patch above appends (base64-encoded, mind you). Hrmmm....
Posted Jul 28, 2013 20:16 UTC (Sun) by jimparis (subscriber, #38647)
mkdtemp doesn't just create a directory with a random suffix. It
creates a _unique_ directory that just happens to have a random suffix.
It guarantees that the directory did not previously exist, is owned by the caller, mode 700, etc. And it returns an error if it can't. The npm patch isn't comparable.
Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds