From f77da1ae08512b02a3c50a124f823ed77e53dd64 Mon Sep 17 00:00:00 2001 From: erik Date: Fri, 26 Jan 2007 20:30:32 +0000 Subject: Both packageslave.cpp and textedit.cpp have instances of possibly exploitable race conditions associated to files. The big deal is that it is quite typical to use strings of pathnames to track files. But because that does not leverage the filesystem would be attackers may be able to exploit time lags in uses of filesystem functions (like stat and chmod or open) to get files with suspect data into the files that the applications are working with. This commit closes that potential hole even though there are no known exploits. Better safe then sorry. There is no change in the behavior of the apps. --- (limited to 'pics/inline/c_src.png') -- cgit v0.9.0.2