[PATCH] fopen: create short(er) temporary file name
authorDaniel Stenberg <daniel@haxx.se>
Thu, 23 Nov 2023 07:23:17 +0000 (08:23 +0100)
committerCarlos Henrique Lima Melara <charlesmelara@riseup.net>
Sat, 17 Aug 2024 17:06:29 +0000 (14:06 -0300)
commit5ac498be0e15b8779dba5510def6448b992ae5a2
treedc5a999b6b7e58c8e3a40657a49d797e7c93839d
parent5f92cd46a2d231dc6a43a0f31141785119afb55c
[PATCH] fopen: create short(er) temporary file name

Only using random letters in the name plus a ".tmp" extension. Not by
appending characters to the final file name.

Reported-by: Maksymilian Arciemowicz
Closes #12388

Backported by: Samuel Henrique <samueloph@debian.org>:
 * The function Curl_rand_alnum was renamed to Curl_rand_hex

Gbp-Pq: Name CVE-2023-46219.patch
lib/fopen.c