From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,INVALID_MSGID,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 103376,f868292008c639ce
X-Google-Attributes: gid103376,public
From: Florian Weimer <fw@deneb.cygnus.argh.org>
Subject: Re: C vs. Ada - strings
Date: 2000/05/06
Message-ID: <87hfcct911.fsf@deneb.cygnus.argh.org>#1/1
X-Deja-AN: 619895614
Content-Transfer-Encoding: 8bit
References: <390F0D93.F835FAD9@ftw.rsc.raytheon.com>
 <wccg0s066nn.fsf@world.std.com> <8es4ad$3d6$1@nnrp1.deja.com>
 <wcc7lda9qzc.fsf@world.std.com> <8esjc3$lp1$1@nnrp1.deja.com>
 <87og6lv6ix.fsf@deneb.cygnus.argh.org> <3913A2E6.DC1BB384@online.no>
Mail-Copies-To: never
Content-Type: text/plain; charset=iso-8859-1
X-Complaints-To: abuse@cygnus.argh.org
X-Trace: deneb.cygnus.argh.org 957599242 4049 192.168.1.2 (6 May 2000 07:47:22
 GMT)
Organization: Penguin on board
User-Agent: Gnus/5.0807 (Gnus v5.8.7) Emacs/20.6
Mime-Version: 1.0
Reply-To: Florian Weimer <fw-usenet@deneb.cygnus.argh.org>
NNTP-Posting-Date: 6 May 2000 07:47:22 GMT
Newsgroups: comp.lang.ada
Date: 2000-05-06T07:47:22+00:00
List-Id: <comp.lang.ada>

"Tarjei Tj�stheim Jensen" <tarjei@online.no> writes:

> One should keep away from mktemp(), but the Ansi C functions are
> perfectly usable and sensible to use.

tmpnam() is broken as designed (the information is already outdated
when it is returned, and on Unix systems, an attacker could have
created a symlink linking to some interesting file), tmpfile() has
the correct interface, but you can't be sure that it's correctly
implemented on all systems. :-/