xLua icon indicating copy to clipboard operation
xLua copied to clipboard

Insecure Temporary File

Open ihsinme opened this issue 4 years ago • 0 comments

Good afternoon. I noticed in your code the functions using tmpnam. the problem with this function is that it only determines the availability of the filename at the time it is called. those. when you start working with this name, you are not sure about the absence of a file with this name. if it is important then you need to use mkstemp or mkdtemp.

https://github.com/Tencent/xLua/blob/41d1078b59677ba8f765fd5d141b2012adcf402e/build/lua-5.3.5/src/loslib.c#L169

ihsinme avatar Oct 25 '21 08:10 ihsinme