Package: dpkg

The implementation of vsnprintf in the compat library uses and caches the file 
descriptor for a temporary file.

If the vsnprintf function is called before a fork, two concurrent processes 
will share the cached file descriptor and will eventually cause a race 
condition where the output of snprintf in one process will leak to the other.

The easy solution is to simply stop using a global file descriptor, it will be 
slower, but it will at least be correct.

Daniel
-- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.

Reply via email to