public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

generate-expr-from-tarballs.pl: fix insecure temporary file

Browse Source 
https://cwe.mitre.org/data/definitions/377.html
This commit is contained in:
TredwellGit 2020-09-30 09:21:55 +00:00
parent d7702e0dba
commit 5235437533
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkgs/servers/x11/xorg/generate-expr-from-tarballs.pl
View File

@ -11,8 +11,7 @@ use warnings;
use File::Basename; use File::Basename;
use File::Spec::Functions; use File::Spec::Functions;
use File::Temp;
my $tmpDir = "/tmp/xorg-unpack";
my %pkgURLs; my %pkgURLs;
@ -93,8 +92,7 @@ while (<>) {
$pkgHashes{$pkg} = $hash; $pkgHashes{$pkg} = $hash;
print "\nunpacking $path\n"; print "\nunpacking $path\n";
system "rm -rf '$tmpDir'"; my $tmpDir = File::Temp->newdir();
mkdir $tmpDir, 0700;
system "cd '$tmpDir' && tar xf '$path'"; system "cd '$tmpDir' && tar xf '$path'";
die "cannot unpack `$path'" if $? != 0; die "cannot unpack `$path'" if $? != 0;
print "\n"; print "\n";