Skip to content

Fix insecure temporary file and directory creation, error checking

Guido Berhörster requested to merge personal/gber/fix-tmp-file-dir into master

Seurely create a temporary directory using mktemp and check for errors both when creating the directory and wehn changing the current working directory. Place the tarball inside the temporary directory instead of using a predictable file name in /tmp which may lead to a symlink attack. Ensure the temporary directory is always removed.

Merge request reports

Loading