[FFmpeg-devel] [RFC] av_tempfile()
Reimar Döffinger
Reimar.Doeffinger at gmx.de
Sun Oct 16 22:19:44 CEST 2011
On 16 Oct 2011, at 22:09, Michael Niedermayer <michaelni at gmx.at> wrote:
>> Note: if they were to somehow block /tmp it even allows creating files
>> with arbitrary content in the current directory.
>> Which is one step closer to allowing it to be executed (can't think of
>> way right now, Windows likes executing stuff in "." but does not like
>> things without the proper extensions, Linux wants execute flag and
>> usually does not look in ".", but still...)
>
> anything i should change in the code ?
I would suggest removing the "." fallback, but then the mkstemp version would break on any system without tmp (e.g. if there's some mingw with mkstemp), without any workaround possible.
>
More information about the ffmpeg-devel
mailing list