Project

General

Profile

Actions
Copy link

Improvements #14040

closed
AB RM

Build warning: unsafe use of tmpnam in SslUtils.C

Improvements #14040: Build warning: unsafe use of tmpnam in SslUtils.C

Added by Alexandre Bencz 11 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Romain Mardulyn
Target version:
4.13.3
Start date:
10/13/2025
Due date:
% Done:

0%

Estimated time:

Description

During the build process, the following warning was displayed:

/usr/bin/ld: CMakeFiles/test.wt.dir/utils/SslUtils.C.o: in function `SslUtils_readPrivateKey::test_method()':
SslUtils.C:(.text+0x71c): warning: the use of `tmpnam' is dangerous, better use `mkstemp'

Impact:
The use of tmpnam is unsafe and can lead to race conditions when creating temporary files, posing a potential security risk.

Suggested action:
Replace tmpnam with mkstemp, which is the recommended and safer alternative according to the C/C++ documentation.

Steps to reproduce:
Run the full project build.
Observe the warning during the linking stage.

Environment:

$ uname -a
Linux instance-20250626-1716 6.14.0-1013-oracle #13~24.04.1-Ubuntu SMP Wed Sep 10 06:43:11 UTC 2025 aarch64 aarch64 aarch64 GNU/Linux

$ clang --version
Ubuntu clang version 18.1.3 (1ubuntu1)
Target: aarch64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/bin

$ cmake --version
cmake version 3.28.3

CMake suite maintained and supported by Kitware (kitware.com/cmake).

MV Updated by Matthias Van Ceulebroeck 11 months ago Actions
Copy link
 #1

  • Target version set to 4.13.2

It's only in a test file, but yes, it ought to be avoided.

RM Updated by Romain Mardulyn 9 months ago Actions
Copy link
 #2

  • Status changed from New to InProgress
  • Assignee set to Romain Mardulyn

RM Updated by Romain Mardulyn 9 months ago Actions
Copy link
 #3

  • Status changed from InProgress to Review
  • Assignee deleted (Romain Mardulyn)

RM Updated by Romain Mardulyn 5 months ago Actions
Copy link
 #4

  • Target version changed from 4.13.2 to 4.13.3

MV Updated by Matthias Van Ceulebroeck 4 months ago Actions
Copy link
 #5

  • Assignee set to Matthias Van Ceulebroeck

RM Updated by Romain Mardulyn 4 months ago Actions
Copy link
 #6

  • Status changed from Review to Implemented @Emweb
  • Assignee changed from Matthias Van Ceulebroeck to Romain Mardulyn

RM Updated by Romain Mardulyn 3 months ago Actions
Copy link
 #7

  • Status changed from Implemented @Emweb to Closed
Actions
Copy link

Also available in: PDF Atom