Am Donnerstag, 20. April 2006 10:47 schrieb Magnus Hagander:
> Indeed, that's definitly a bug. Quick patch attached. It does appear to
> work, but there may be a better way?
This patch introduces a security hole because an attacker could create, say, a
suitable symlink between the time the name is generated and the file is
opened.
--
Peter Eisentraut
http://developer.postgresql.org/~petere/