[PATCH] fopen: create short(er) temporary file name
authorDaniel Stenberg <daniel@haxx.se>
Thu, 23 Nov 2023 07:23:17 +0000 (08:23 +0100)
committerSamuel Henrique <samueloph@debian.org>
Fri, 8 May 2026 14:16:21 +0000 (07:16 -0700)
commit82b2274e638dd460f828f27c45414b99667fa1a3
tree5846063e03e5c8ae8e933600aa7d208052056cb0
parent414b764d85716c2de62e8314aac33244a8d00a74
[PATCH] fopen: create short(er) temporary file name

Only using random letters in the name plus a ".tmp" extension. Not by
appending characters to the final file name.

Reported-by: Maksymilian Arciemowicz
Closes #12388

Backported by: Samuel Henrique <samueloph@debian.org>:
 * The function Curl_rand_alnum was renamed to Curl_rand_hex

Gbp-Pq: Name CVE-2023-46219.patch
lib/fopen.c