Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rustc: Avoid /tmp/ in graphviz writing #52195

Merged
merged 1 commit into from
Jul 11, 2018
Merged

Commits on Jul 9, 2018

  1. rustc: Avoid /tmp/ in graphviz writing

    This issue was reported to [email protected] by Sebastien Marie following
    our recent [security advisory][1]. Because `/tmp` is typically globally writable
    it's possible for one user to place symlinks in `/tmp` pointing to files in
    another user's directories, causing `rustc` to overwrite the contents of
    innocent files by accident.
    
    This patch instead defaults the output path here to the cwd which should avoid
    this issue.
    
    [1]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html
    alexcrichton committed Jul 9, 2018
    Configuration menu
    Copy the full SHA
    bc09fcb View commit details
    Browse the repository at this point in the history