Re: ACT announces availability of GNAT 3.14p

[Florian Weimer <fw@deneb.enyo.de>]

dewar@gnat.com (Robert Dewar) writes:

> I would certainly agree with that. But I remind again, that
> if you are writing high security Ada programs, e.g. those
> running as setuid, you are well advised to stay away from
> anonymous temporary files whose location is not specified
> by the standard in any case.

Funny to see that Robert is spreading misinformation on CLA. ;-)

The problem in GNAT 3.14p and earlier does not only affect setuid
applications, it affects any application which creates temporary
files.  Arguing from the Ada standard is of no help here because the
Ada standard does not provide an interface to create temporary files
safely, without race conditions.  Furthermore, in GNAT 3.14p, the
location *is* hardwired to /tmp for setuid programs, at least if the
underlying libc is reasonable (which can be checked by examining the
source code).