Message-Id: <email address hidden>
Date: Mon, 10 Jan 2005 10:33:00 +0100
From: Bram Moolenaar <email address hidden>
To: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <email address hidden>
Cc: <email address hidden>
Subject: Re: vim: Race conditions and symlink attacks in vim (tcltags and vimspell)
Javier -
> > Did you contact the original authors, Darren Hiebert and Neil
> > Schemenauer?
>
> No, I didn't. I was not sure if they were still active. Do you want me to
> forward this?
Yes. They are the authors, thus I hesitate to change their work without
at least trying to contact them.
> > I wonder if there isn't a shorter method. The handling of the temp file
> > becomes more than half the script this way.
>
> Actually, there is, you could remove the lines that try to use a temporary
> file in a temporary directory (below the comments) and just abort with a
> "Cannot create temporary file" message if tmp_tagfile (or OUTFILE) are
> 'none'.
So there would be a few (old?) systems where the script won't work?
--
GALAHAD: No. Look, I can tackle this lot single-handed!
GIRLS: Yes, yes, let him Tackle us single-handed! "Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD
Message-Id: <email address hidden> 1?Q?Fern= E1ndez- Sanguino_ Pe=F1a? = <email address hidden>
Date: Mon, 10 Jan 2005 10:33:00 +0100
From: Bram Moolenaar <email address hidden>
To: Javier =?iso-8859-
Cc: <email address hidden>
Subject: Re: vim: Race conditions and symlink attacks in vim (tcltags and vimspell)
Javier -
> > Did you contact the original authors, Darren Hiebert and Neil
> > Schemenauer?
>
> No, I didn't. I was not sure if they were still active. Do you want me to
> forward this?
Yes. They are the authors, thus I hesitate to change their work without
at least trying to contact them.
> > I wonder if there isn't a shorter method. The handling of the temp file
> > becomes more than half the script this way.
>
> Actually, there is, you could remove the lines that try to use a temporary
> file in a temporary directory (below the comments) and just abort with a
> "Cannot create temporary file" message if tmp_tagfile (or OUTFILE) are
> 'none'.
So there would be a few (old?) systems where the script won't work?
--
"Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD
GALAHAD: No. Look, I can tackle this lot single-handed!
GIRLS: Yes, yes, let him Tackle us single-handed!
/// Bram Moolenaar -- <email address hidden> -- http:// www.Moolenaar. net \\\ www.Vim. org/sponsor/ \\\ www.A-A- P.org /// ICCF.nl/ lotr.html ///
/// Sponsor Vim, vote for features -- http://
\\\ Project leader for A-A-P -- http://
\\\ Buy LOTR 3 and help AIDS victims -- http://