Re: [FWP] Puzzle - Temp file creation

[Adam Rice <wysiwyg@glympton.airtime.co.uk>]

Quoting Chaim Frenkel (chaimf@pobox.com):
> Okay enlighten me. What am I missing?

I suggest you go find an archive of security advisories and start reading.
It shouldn't take you more than a few messages to start noticing the
patterns.

Buffer overflows and *temp file creation*. Over and over again. Week in,
week out, the same programming errors recurring in the work of hundreds of
different authors.

You may say "but my program isn't security critical!" But history has shown
that any piece of software that is widely used will eventually be
used in a security-critical manner (MS Office is a recent good example of
this).

So, knowing this, why on earth would you risk it? IO::File->new_tmpfile is
there. Use it.

-- 
Adam Rice -- wysiwyg@glympton.airtime.co.uk -- Blackburn, Lancashire, England

==== Want to unsubscribe from Fun With Perl?  Well, if you insist...
==== Send email to <fwp-request@technofile.org> with message _body_
====   unsubscribe