Colin Tuckley wrote: > tmpnam generates a name for a file which is guaranteed *not* to exist
No, tmpnam generates a name for a file that did not exist at some point in time, but that *will* exist in the worst possible state (eg, a symlink to something important) when an attacker is targeting your program. -- see shy jo
signature.asc
Description: Digital signature
