falso
/
cdesktopenv
mirror of https://git.code.sf.net/p/cdesktopenv/code
1
0
Fork 0
Code Issues Releases Wiki Activity
cdesktopenv/cde/lib/DtWidget
History
Trung Lê 72d0164644 Security: replace tmpnam() with mkstemp() 
tmpnam() is inherently insecure due to race conditions between
filename generation and file creation (CWE-377). Replace all
occurrences with mkstemp() which atomically creates the file.

Pattern used (portable, already used elsewhere in CDE):
  strcpy(tmpName, "/tmp/dtXXX_XXXXXX");
  { int _tf = mkstemp(tmpName); if (_tf >= 0) close(_tf); }

Files modified:
- lib/DtHelp/Access.c (2 occurrences)
- lib/DtSvc/DtUtil1/DtsMM.c (1 occurrence)
- lib/DtWidget/Editor.c (2 occurrences)
- lib/DtWidget/SearchCalls.c (1 occurrence)
- programs/dtcreate/main.c (2 occurrences)
- programs/dticon/main.c (1 occurrence)
- programs/dtlogin/policy.c (1 occurrence)
- programs/dtpad/fileIo.c (1 occurrence)
- programs/dtpdm/PdmXp.c (1 occurrence)
- programs/dtpdmd/manager.c (1 occurrence)
- programs/dtspcd/main.c (1 occurrence)
- programs/dtwm/WmResParse.c (1 occurrence)

Note: dtksh/ksh93 directory intentionally skipped (vendored code)
 		2026-01-29 17:10:18 +11:00
..
ComboBox.c fix misleading indentation 2025-12-18 22:58:26 +01:00
Control.c libdtwidget: resolve uninitialized warnings 2021-12-24 10:50:27 -07:00
DialogBox.c DialogBox.c: fix ptr<->int conversion 2021-10-23 16:40:22 -06:00
DtMsgs.c Centralize catgets() calls through MsgCat 2021-06-02 19:55:15 -06:00
DtStrDefs.c Fix typo in license headers 2018-04-28 12:30:20 -06:00
DtSvcInternal.h Add missing license headers on *.hh files and others 2018-05-12 15:49:13 -06:00
DtWidget.msg
…
DtWidgetI.h Fix typo in license headers 2018-04-28 12:30:20 -06:00
EditAreaData.c DtWidget: remove register keyword 2018-06-27 21:58:04 -06:00
EditCalls.c DtWidget: remove register keyword 2018-06-27 21:58:04 -06:00
Editor.c Security: replace tmpnam() with mkstemp() 2026-01-29 17:10:18 +11:00
Icon.c libdtwidget: resolve uninitialized warnings 2021-12-24 10:50:27 -07:00
Makefile.am Remove detected -lcrypt flag 2022-08-06 11:31:50 -06:00
MenuButton.c Fix typo in license headers 2018-04-28 12:30:20 -06:00
NewCvt.c Fix typo in license headers 2018-04-28 12:30:20 -06:00
SearchCalls.c Security: replace tmpnam() with mkstemp() 2026-01-29 17:10:18 +11:00
SearchDlg.c DtWidget: remove register keyword 2018-06-27 21:58:04 -06:00
SpinBox.c libdtwidget: resolve uninitialized warnings 2021-12-24 10:50:27 -07:00
TitleBox.c libdtwidget: resolve uninitialized warnings 2021-12-24 10:50:27 -07:00
UNIXbindings.cpp
…
View.c Handle changes needed for C23 compatibility that turns on strict ansi prototypes by default. C23 is now the default for GCC 15 2025-12-31 15:06:27 +00:00
mapfile.reorder
…