[PATCH] fopen: create short(er) temporary file name
authorDaniel Stenberg <daniel@haxx.se>
Thu, 23 Nov 2023 07:23:17 +0000 (08:23 +0100)
committerSamuel Henrique <samueloph@debian.org>
Sat, 19 Jul 2025 19:04:59 +0000 (21:04 +0200)
commiteec1a806afa4b05bf4718328a2bfb9b43cbd052b
treebe28bb97392f7280ee1d95e74aed9e7a76fa59be
parent7acbd9b03a6e7acae7db8305f30fa15abbbf745f
[PATCH] fopen: create short(er) temporary file name

Only using random letters in the name plus a ".tmp" extension. Not by
appending characters to the final file name.

Reported-by: Maksymilian Arciemowicz
Closes #12388

Backported by: Samuel Henrique <samueloph@debian.org>:
 * The function Curl_rand_alnum was renamed to Curl_rand_hex

Gbp-Pq: Name CVE-2023-46219.patch
lib/fopen.c