Derek Atkins a929bcdf33 /tmp/qof.trace or /tmp/gnucash.trace is opened for writing directly. ...

This could be a security issue if someone else, say, makes a symlink
to somewhere else.  Instead, create a tempfile and then rename it
into place which is safe against the symlink attack.
Patch by Bill Nottingham <notting@redhat.com>
BP



git-svn-id: svn+ssh://svn.gnucash.org/repo/gnucash/trunk@15435 57a11ea4-9604-0410-9ed3-97b8803252fd

2007-01-28 03:16:39 +00:00

..

backend

Use g_open, g_fopen, g_stat and g_unlink.

2007-01-21 16:38:42 +00:00

qof

/tmp/qof.trace or /tmp/gnucash.trace is opened for writing directly.

2007-01-28 03:16:39 +00:00

Makefile.am

move QOF files to lib/libqof/

2005-11-13 13:22:34 +00:00