Re: [Lcd4linux-devel] make lcd4linux secure!

[Jerry S. <ye...@th...>]

On Wed, Jun 02, 2004 at 07:19:02AM +0200, Michael Reinelt wrote:
> Hi Jerry,
> But I think I've already fixed this: I'm calling unlink() just before 
> the open() to remove the file if it exists. The open() is called with 
> the O_EXCL flag, which means it will fail if the file existed. As we've 
> unlinked it just before, this should never happen. If it happens, I emit 
> an error and abort.
> 
> This looks secure enough to mee.

Agreed.  Failing out would prevent overwriting other files.

Jerry

-- 
Jerry Seutter

Email: ye...@th...
Web: http://www.thegeeks.net/~yello
Gallery: www.thegeeks.net/~yello/gallery (email me for username and password).