From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name Resent-From: Marcin Borkowski Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 13 Feb 2015 21:58:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 19858@debbugs.gnu.org X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.142386465825781 (code B ref -1); Fri, 13 Feb 2015 21:58:01 +0000 Received: (at submit) by debbugs.gnu.org; 13 Feb 2015 21:57:38 +0000 Received: from localhost ([127.0.0.1]:42316 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YMOEz-0006hl-Ul for submit@debbugs.gnu.org; Fri, 13 Feb 2015 16:57:38 -0500 Received: from eggs.gnu.org ([208.118.235.92]:53040) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YMOEx-0006hT-BJ for submit@debbugs.gnu.org; Fri, 13 Feb 2015 16:57:36 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YMOEr-0000Iq-7J for submit@debbugs.gnu.org; Fri, 13 Feb 2015 16:57:30 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:44408) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YMOEr-0000Il-3j for submit@debbugs.gnu.org; Fri, 13 Feb 2015 16:57:29 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:54743) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YMOEq-0000ga-5q for bug-gnu-emacs@gnu.org; Fri, 13 Feb 2015 16:57:29 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YMOEm-0000Gi-5b for bug-gnu-emacs@gnu.org; Fri, 13 Feb 2015 16:57:28 -0500 Received: from msg.wmi.amu.edu.pl ([150.254.78.50]:33309) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YMOEl-0000GK-Vt for bug-gnu-emacs@gnu.org; Fri, 13 Feb 2015 16:57:24 -0500 Received: from localhost (localhost [127.0.0.1]) by msg.wmi.amu.edu.pl (Postfix) with ESMTP id 400C45207A for ; Fri, 13 Feb 2015 22:57:21 +0100 (CET) Received: from msg.wmi.amu.edu.pl ([127.0.0.1]) by localhost (msg.wmi.amu.edu.pl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RbrXHDLiTbnJ for ; Fri, 13 Feb 2015 22:57:21 +0100 (CET) Received: from localhost (117-116.echostar.pl [213.156.117.116]) by msg.wmi.amu.edu.pl (Postfix) with ESMTPSA id 03D005206D for ; Fri, 13 Feb 2015 22:57:20 +0100 (CET) From: Marcin Borkowski Date: Fri, 13 Feb 2015 22:57:15 +0100 Message-ID: <87y4o1wk3o.fsf@wmi.amu.edu.pl> MIME-Version: 1.0 Content-Type: text/plain X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) The docstring for `make-temp-file' says (among other things): "For that reason, you should probably use `make-temp-file' instead, except in three circumstances: * If you are creating the file in the user's home directory. * If you are creating a directory rather than an ordinary file." However, `make-temp-file' actually can create directories, so the second point in the above quote is unnecessary and misleading. Best regards, Version info: In GNU Emacs 25.0.50.1 (i686-pc-linux-gnu, GTK+ Version 3.10.8) of 2015-01-02 on aga-netbook Repository revision: 11ee7d8bf16b8ee4fcb3659e4b09686ed8b10590 Windowing system distributor `The X.Org Foundation', version 11.0.11501000 System Description: Ubuntu 14.04.1 LTS -- Marcin Borkowski http://octd.wmi.amu.edu.pl/en/Marcin_Borkowski Faculty of Mathematics and Computer Science Adam Mickiewicz University From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 14 Feb 2015 04:08:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Marcin Borkowski Cc: 19858@debbugs.gnu.org Received: via spool by 19858-submit@debbugs.gnu.org id=B19858.14238868805045 (code B ref 19858); Sat, 14 Feb 2015 04:08:01 +0000 Received: (at 19858) by debbugs.gnu.org; 14 Feb 2015 04:08:00 +0000 Received: from localhost ([127.0.0.1]:42492 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YMU1Q-0001JJ-63 for submit@debbugs.gnu.org; Fri, 13 Feb 2015 23:08:00 -0500 Received: from pruche.dit.umontreal.ca ([132.204.246.22]:46199) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YMU1P-0001JB-1Q for 19858@debbugs.gnu.org; Fri, 13 Feb 2015 23:07:59 -0500 Received: from fmsmemgm.homelinux.net (lechon.iro.umontreal.ca [132.204.27.242]) by pruche.dit.umontreal.ca (8.14.1/8.14.1) with ESMTP id t1E47vKa008069; Fri, 13 Feb 2015 23:07:58 -0500 Received: by fmsmemgm.homelinux.net (Postfix, from userid 20848) id AB89AAE0CA; Fri, 13 Feb 2015 23:07:57 -0500 (EST) From: Stefan Monnier Message-ID: References: <87y4o1wk3o.fsf@wmi.amu.edu.pl> Date: Fri, 13 Feb 2015 23:07:57 -0500 In-Reply-To: <87y4o1wk3o.fsf@wmi.amu.edu.pl> (Marcin Borkowski's message of "Fri, 13 Feb 2015 22:57:15 +0100") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 1 Rules triggered RV5216=0 X-NAI-Spam-Version: 2.3.0.9393 : core <5216> : inlines <2181> : streams <1389901> : uri <1854839> X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.3 (-) > The docstring for `make-temp-file' says (among other things): > "For that reason, you should > probably use `make-temp-file' instead, except in three circumstances: > * If you are creating the file in the user's home directory. > * If you are creating a directory rather than an ordinary file." > However, `make-temp-file' actually can create directories, so the second > point in the above quote is unnecessary and misleading. make-temp-file can also create a temp file in the user's home directory (so your criticism also applies to the first point). The issue is simply that in cases other than the above two, using make-temp-name is *dangerous*. Stefan From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name In-Reply-To: <87y4o1wk3o.fsf@wmi.amu.edu.pl> Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 17 Feb 2015 22:34:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Stefan Monnier Cc: 19858@debbugs.gnu.org, Marcin Borkowski Received: via spool by 19858-submit@debbugs.gnu.org id=B19858.14242124418879 (code B ref 19858); Tue, 17 Feb 2015 22:34:02 +0000 Received: (at 19858) by debbugs.gnu.org; 17 Feb 2015 22:34:01 +0000 Received: from localhost ([127.0.0.1]:46683 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YNqiO-0002J9-RS for submit@debbugs.gnu.org; Tue, 17 Feb 2015 17:34:01 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:47255 ident=Debian-exim) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YNqiM-0002J0-HF for 19858@debbugs.gnu.org; Tue, 17 Feb 2015 17:33:58 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1YNqiK-00033x-QP; Tue, 17 Feb 2015 17:33:56 -0500 From: Glenn Morris References: <87y4o1wk3o.fsf@wmi.amu.edu.pl> X-Spook: Leitrim bemd INS defense information warfare Security X-Ran: {2:/^MoEbC{nZ|P;z,RDp1zc=zU&uw;s`K9E`k-;Vc#=l>I=2?XV;tqqGU@A(5q[;O_-HC X-Hue: green X-Attribution: GM Date: Tue, 17 Feb 2015 17:33:56 -0500 Message-ID: User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Stefan Monnier wrote: > make-temp-file can also create a temp file in the user's home directory > (so your criticism also applies to the first point). > > The issue is simply that in cases other than the above two, using > make-temp-name is *dangerous*. Why's it not dangerous in HOME? From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 18 Feb 2015 03:48:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Glenn Morris Cc: 19858@debbugs.gnu.org, Marcin Borkowski Received: via spool by 19858-submit@debbugs.gnu.org id=B19858.142423122414717 (code B ref 19858); Wed, 18 Feb 2015 03:48:02 +0000 Received: (at 19858) by debbugs.gnu.org; 18 Feb 2015 03:47:04 +0000 Received: from localhost ([127.0.0.1]:46838 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YNvbL-0003pG-Jj for submit@debbugs.gnu.org; Tue, 17 Feb 2015 22:47:04 -0500 Received: from pruche.dit.umontreal.ca ([132.204.246.22]:52108) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YNvbJ-0003or-IR for 19858@debbugs.gnu.org; Tue, 17 Feb 2015 22:47:01 -0500 Received: from pastel.home (lechon.iro.umontreal.ca [132.204.27.242]) by pruche.dit.umontreal.ca (8.14.1/8.14.1) with ESMTP id t1I3kxVw010971; Tue, 17 Feb 2015 22:46:59 -0500 Received: by pastel.home (Postfix, from userid 20848) id EB9741E3C; Tue, 17 Feb 2015 22:46:41 -0500 (EST) From: Stefan Monnier Message-ID: References: <87y4o1wk3o.fsf@wmi.amu.edu.pl> Date: Tue, 17 Feb 2015 22:46:41 -0500 In-Reply-To: (Glenn Morris's message of "Tue, 17 Feb 2015 17:33:56 -0500") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-NAI-Spam-Flag: NO X-NAI-Spam-Threshold: 5 X-NAI-Spam-Score: 0 X-NAI-Spam-Rules: 1 Rules triggered RV5220=0 X-NAI-Spam-Version: 2.3.0.9393 : core <5220> : inlines <2217> : streams <1392085> : uri <1858029> X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.3 (-) >> make-temp-file can also create a temp file in the user's home directory >> (so your criticism also applies to the first point). >> The issue is simply that in cases other than the above two, using >> make-temp-name is *dangerous*. > Why's it not dangerous in HOME? Presumably, HOME is only writable by yourself, so you can presume that there's no attacker trying play race-condition tricks on you in there to try and get to run code under your UID. Stefan From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name Resent-From: Glenn Morris Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 20 Feb 2015 05:43:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Stefan Monnier Cc: 19858@debbugs.gnu.org, Marcin Borkowski Received: via spool by 19858-submit@debbugs.gnu.org id=B19858.142441097018688 (code B ref 19858); Fri, 20 Feb 2015 05:43:02 +0000 Received: (at 19858) by debbugs.gnu.org; 20 Feb 2015 05:42:50 +0000 Received: from localhost ([127.0.0.1]:49054 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOgMT-0004rL-Ou for submit@debbugs.gnu.org; Fri, 20 Feb 2015 00:42:49 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:55902) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOgMR-0004rE-VF for 19858@debbugs.gnu.org; Fri, 20 Feb 2015 00:42:48 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1YOgMQ-0004N7-Uh; Fri, 20 Feb 2015 00:42:46 -0500 From: Glenn Morris References: <87y4o1wk3o.fsf@wmi.amu.edu.pl> X-Spook: Craig Livingstone Hugo Chavez War on Terrorism Montenegro X-Ran: QI|K>"ObdEvE[x^ewf1Xcz4}`gK!o^]^SLW3]Okjq%`D!~G4$]dw~5t8R&CcL!Amt">{A( X-Hue: cyan X-Attribution: GM Date: Fri, 20 Feb 2015 00:42:46 -0500 In-Reply-To: (Stefan Monnier's message of "Tue, 17 Feb 2015 22:46:41 -0500") Message-ID: <2smw49cf55.fsf@fencepost.gnu.org> User-Agent: Gnus (www.gnus.org), GNU Emacs (www.gnu.org/software/emacs/) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: -5.0 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) Stefan Monnier wrote: > Presumably, HOME is only writable by yourself, so you can presume that > there's no attacker trying play race-condition tricks on you in there to > try and get to run code under your UID. If it meant "it's safe so long as no-one else can write to the containing directory", then I think it should have said that rather than making assumptions about the permissions of HOME. Anyway, I don't think those various qualifications were helpful, so I basically removed them from the doc. From debbugs-submit-bounces@debbugs.gnu.org Fri Feb 20 00:43:12 2015 Received: (at control) by debbugs.gnu.org; 20 Feb 2015 05:43:12 +0000 Received: from localhost ([127.0.0.1]:49058 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOgMq-0004sK-2t for submit@debbugs.gnu.org; Fri, 20 Feb 2015 00:43:12 -0500 Received: from fencepost.gnu.org ([208.118.235.10]:55903) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOgMk-0004s8-57 for control@debbugs.gnu.org; Fri, 20 Feb 2015 00:43:11 -0500 Received: from rgm by fencepost.gnu.org with local (Exim 4.71) (envelope-from ) id 1YOgMj-0004PO-Rj for control@debbugs.gnu.org; Fri, 20 Feb 2015 00:43:05 -0500 Date: Fri, 20 Feb 2015 00:43:05 -0500 Message-Id: Subject: control message for bug 19858 To: X-Mailer: mail (GNU Mailutils 2.1) From: Glenn Morris X-Spam-Score: -5.0 (-----) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.0 (-----) close 19858 24.5 From unknown Sun Aug 10 02:41:51 2025 X-Loop: help-debbugs@gnu.org Subject: bug#19858: 25.0.50; Docstring bug in make-temp-name Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 20 Feb 2015 17:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 19858 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Glenn Morris Cc: 19858@debbugs.gnu.org, Marcin Borkowski Received: via spool by 19858-submit@debbugs.gnu.org id=B19858.142445254232459 (code B ref 19858); Fri, 20 Feb 2015 17:16:02 +0000 Received: (at 19858) by debbugs.gnu.org; 20 Feb 2015 17:15:42 +0000 Received: from localhost ([127.0.0.1]:49665 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOrAz-0008RT-S8 for submit@debbugs.gnu.org; Fri, 20 Feb 2015 12:15:42 -0500 Received: from ironport2-out.teksavvy.com ([206.248.154.181]:60940) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1YOrAx-0008RL-H0 for 19858@debbugs.gnu.org; Fri, 20 Feb 2015 12:15:39 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ar8TAPOG1lTO+LI//2dsb2JhbABbgwaDX4VTvhyCSQQCAoENRAEBAQEBAXyEDQEEAVYjBQsLDiYSFBgNJIg4CM4jAQEBAQEBAQMBAQEBAR2PeAeEKgWKJ59LgUUihAwggnMBAQE X-IPAS-Result: Ar8TAPOG1lTO+LI//2dsb2JhbABbgwaDX4VTvhyCSQQCAoENRAEBAQEBAXyEDQEEAVYjBQsLDiYSFBgNJIg4CM4jAQEBAQEBAQMBAQEBAR2PeAeEKgWKJ59LgUUihAwggnMBAQE X-IronPort-AV: E=Sophos;i="5.09,536,1418101200"; d="scan'208";a="111022680" Received: from 206-248-178-63.dsl.teksavvy.com (HELO pastel.home) ([206.248.178.63]) by ironport2-out.teksavvy.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Feb 2015 12:15:39 -0500 Received: by pastel.home (Postfix, from userid 20848) id BF55D1775; Fri, 20 Feb 2015 12:15:13 -0500 (EST) From: Stefan Monnier Message-ID: References: <87y4o1wk3o.fsf@wmi.amu.edu.pl> <2smw49cf55.fsf@fencepost.gnu.org> Date: Fri, 20 Feb 2015 12:15:13 -0500 In-Reply-To: <2smw49cf55.fsf@fencepost.gnu.org> (Glenn Morris's message of "Fri, 20 Feb 2015 00:42:46 -0500") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.3 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.3 (/) > Anyway, I don't think those various qualifications were helpful, so I > basically removed them from the doc. Agreed, thanks, Stefan