|
| From: | Stefan Nordhausen |
| Subject: | Re: Symlink Vulnerability in GNU libtool <1.5.2 |
| Date: | Sat, 07 Feb 2004 00:55:54 +0100 |
| User-agent: | Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040113 |
Bob Friesenhahn wrote:
You are assuming that $RANDOM is portable and functional across all Bourne-like shells.
For shells that don't implement $RANDOM it will simply be an uninitialized variable which defaults to "". That means you will get "$tmpdir/libtool-$$..." as a directory name.
Regards Stefan
| [Prev in Thread] | Current Thread | [Next in Thread] |