banned.h: ban mktemp(3)
Older versions of mktemp(3) generate easily guessable file names. The function checks if the generated name is used, which is unreliable, as a file with that name might then be created by some other process before we can do it ourselves. The function was dropped from POSIX due to its security problems. Forbid its use. Signed-off-by: René Scharfe <l.s.r@web.de> Signed-off-by: Junio C Hamano <gitster@pobox.com>
René Scharfe committed
Dec 6, 2025 at 14:29 UTC
7bef658135944d26acf3e1ec9316ca11f4369cf8
1 file changed
+3
banned.h
+3
@@ -41,4 +41,7 @@
41
#undef asctime_r
42
#define asctime_r(t, buf) BANNED(asctime_r)
43
44
+#undef mktemp
45
+#define mktemp(x) BANNED(mktemp)
46
+
47
#endif /* BANNED_H */