From: Jeff King <peff@peff.net>
Date: Wed, 03 Dec 2025 16:12:33 GMT
Subject: Re: [PATCH 4/4] banned.h: ban mktemp(3)
Message-ID: <20251203161233.GB44940@coredump.intra.peff.net>
In-Reply-To: <37a36748-f357-403e-9a98-21d0f8a8fb41@web.de>

On Wed, Dec 03, 2025 at 11:53:06AM +0100, René Scharfe wrote:

> Older versions of mktemp(3) generate easily guessable file names.  The
> function checks if the generated name is used, which is unreliable, as
> a file with that name might then be created by some other process before
> we can do it ourselves.  The function was dropped from POSIX due to its
> security problems.  Forbid its use.

Great. I am happy to see this.

-Peff