220 5323 <4b95e9b9-d5cc-4314-bd32-1e09fe35ed9d@isocpp.org> article Path: news.gmane.org!not-for-mail From: magfr@lysator.liu.se Newsgroups: gmane.comp.lang.c++.isocpp.proposals Subject: Remove filesystem unique_path Date: Sun, 7 Jul 2013 03:59:11 -0700 (PDT) Lines: 61 Approved: news@gmane.org Message-ID: <4b95e9b9-d5cc-4314-bd32-1e09fe35ed9d@isocpp.org> Reply-To: std-proposals@isocpp.org NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_8221_13418412.1373194751294" X-Trace: ger.gmane.org 1373194753 23699 80.91.229.3 (7 Jul 2013 10:59:13 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sun, 7 Jul 2013 10:59:13 +0000 (UTC) To: std-proposals@isocpp.org Original-X-From: std-proposals+bncBDELLREETMBRB74T4WHAKGQERYWUFXI@isocpp.org Sun Jul 07 12:59:14 2013 Return-path: Envelope-to: gclcip-std-proposals@m.gmane.org Original-Received: from mail-gh0-f199.google.com ([209.85.160.199]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1UvmgT-0000H2-Vf for gclcip-std-proposals@m.gmane.org; Sun, 07 Jul 2013 12:59:14 +0200 Original-Received: by mail-gh0-f199.google.com with SMTP id g14sf4190101ghb.2 for ; Sun, 07 Jul 2013 03:59:12 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-beenthere:date:from:to:message-id:subject:mime-version :x-original-sender:reply-to:precedence:mailing-list:list-id :x-google-group-id:list-post:list-help:list-archive:list-subscribe :list-unsubscribe:content-type; bh=RIORM2tuxR3OtO1yqyOpPgM9AX/XdYlLfkzVdl2ZISs=; b=XahSLCaT1Loq0/e7CgiRzLO1JtEUfYCbxeh6e7PhQoZiQYLxzCuaQ2+lH8M3uJEvp1 JAzoKffKwiHmzSQrJ6dRTaE7RvpmjqcIflauhjJZ1ehdM4rypFzASoW6Wg/FLiLUx0O1 XP7HcWI/j4GK1Moy8OwJDP+ciiQcwRvO3XwLfPySO3LHHHAICFpoxPCduyIk70SWHX5Q l/UtM6N/sb17G1apn58XMOlNRJYlWPPlbe5939eVv6VXxMMLiCWfoT/MsS2OUu3xZ3Hx slFL0YcfQERhkjWOpn94hSe1fvfrtRUCCyhKKdd28SBSoMa5IEdC3SpA2eokhrURGV2X vzOw== X-Received: by 10.224.129.196 with SMTP id p4mr20300803qas.6.1373194752804; Sun, 07 Jul 2013 03:59:12 -0700 (PDT) X-BeenThere: std-proposals@isocpp.org Original-Received: by 10.49.58.146 with SMTP id r18ls1417941qeq.23.gmail; Sun, 07 Jul 2013 03:59:11 -0700 (PDT) X-Received: by 10.49.30.105 with SMTP id r9mr389603qeh.4.1373194751657; Sun, 07 Jul 2013 03:59:11 -0700 (PDT) X-Original-Sender: magfr@lysator.liu.se Precedence: list Mailing-list: list std-proposals@isocpp.org; contact std-proposals+owners@isocpp.org List-ID: X-Google-Group-Id: 399137483710 List-Post: , List-Help: , List-Archive: List-Subscribe: , List-Unsubscribe: , Xref: news.gmane.org gmane.comp.lang.c++.isocpp.proposals:5323 Archived-At: ------=_Part_8221_13418412.1373194751294 Content-Type: text/plain; charset=ISO-8859-1 I was surprised when I looked at the file system proposal and found unique_path. unique_path is similar to the POSIX tempnam[1] function that was marked as obsolecent in POSIX 2008 and tmpfile, mkdtemp and mkstemp recommended in it's place. Why incorporate the mistakes from posix in C++? The problem with unique_path is that there is a window of opportunity between the check that the path name is unique and the time when it is used. That window can be used by malware -- and in the case of tempnam it have been used by malware. I thus propose that 15.38 is removed. /MF -- --- You received this message because you are subscribed to the Google Groups "ISO C++ Standard - Future Proposals" group. To unsubscribe from this group and stop receiving emails from it, send an email to std-proposals+unsubscribe@isocpp.org. To post to this group, send email to std-proposals@isocpp.org. Visit this group at http://groups.google.com/a/isocpp.org/group/std-proposals/. ------=_Part_8221_13418412.1373194751294 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I was surprised when I looked at the file system proposal and found unique_= path.

unique_path is similar to the POSIX tempnam[1] function that w= as marked as obsolecent in POSIX 2008 and tmpfile, mkdtemp and mkstemp reco= mmended in it's place. Why incorporate the mistakes from posix in C++?
<= br>The problem with unique_path is that there is a window of opportunity be= tween the check that the path name is unique and the time when it is used.<= br>That window can be used by malware -- and in the case of tempnam it have= been used by malware.

I thus propose that 15.38 is removed.

= /MF

--
 
---
You received this message because you are subscribed to the Google Groups &= quot;ISO C++ Standard - Future Proposals" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to std-proposals+unsubscribe@isocpp.org.
To post to this group, send email to std-proposals@isocpp.org.
Visit this group at http://groups.google.com/a/isocpp.org/group/std-proposals/<= /a>.
 
 
------=_Part_8221_13418412.1373194751294-- .