JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

generate-expr-from-tarballs.pl: fix insecure temporary file

Browse Source 
https://cwe.mitre.org/data/definitions/377.html
This commit is contained in:
TredwellGit 2020-09-30 09:21:55 +00:00
parent d7702e0dba
commit 5235437533
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkgs/servers/x11/xorg/generate-expr-from-tarballs.pl
View File

@ -11,8 +11,7 @@ use warnings;
use File::Basename;
use File::Spec::Functions;
my $tmpDir = "/tmp/xorg-unpack";
use File::Temp;
my %pkgURLs;
@ -93,8 +92,7 @@ while (<>) {
$pkgHashes{$pkg} = $hash;
print "\nunpacking $path\n";
system "rm -rf '$tmpDir'";
mkdir $tmpDir, 0700;
my $tmpDir = File::Temp->newdir();
system "cd '$tmpDir' && tar xf '$path'";
die "cannot unpack `$path'" if $? != 0;
print "\n";