Re: Possible make_oidjoins_check Security Issue

Tom Lane <tgl@sss.pgh.pa.us>

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Alvaro Herrera <alvherre@dcc.uchile.cl>
Cc: Neil Conway <neilc@samurai.com>, Rod Taylor <pg@rbt.ca>, PostgreSQL Development <pgsql-hackers@postgresql.org>
Date: 2004-10-20T04:31:11Z
Lists: pgsql-hackers
Alvaro Herrera <alvherre@dcc.uchile.cl> writes:
> Better, use mktemp(1).  The thread testing script already does it IIRC.

There are only two uses of mktemp(1) in our source tree: configure and
config.guess.  Both were gotten from elsewhere, and both jump through
some seriously unreadable hoops in order to achieve allegedly-portable
behavior.  mktemp(1) is simply not portable :-( ... the Single Unix Spec
refuses to touch it at all ...

			regards, tom lane