about summary refs log tree commit diff
path: root/src/rustllvm/RustWrapper.cpp
diff options
context:
space:
mode:
authorAlex Crichton <alex@alexcrichton.com>2018-07-09 15:26:57 -0700
committerAlex Crichton <alex@alexcrichton.com>2018-07-09 15:26:57 -0700
commitbc09fcb990a7195db540b3dcb9f0f90e52213be2 (patch)
tree169e0a085b2bb9e8ee1346273bbab7486f4f751d /src/rustllvm/RustWrapper.cpp
parentbdd185c8970e79c2cdd3c5cfad7c4bf591836b23 (diff)
downloadrust-bc09fcb990a7195db540b3dcb9f0f90e52213be2.tar.gz
rust-bc09fcb990a7195db540b3dcb9f0f90e52213be2.zip
rustc: Avoid /tmp/ in graphviz writing
This issue was reported to security@rust-lang.org by Sebastien Marie following
our recent [security advisory][1]. Because `/tmp` is typically globally writable
it's possible for one user to place symlinks in `/tmp` pointing to files in
another user's directories, causing `rustc` to overwrite the contents of
innocent files by accident.

This patch instead defaults the output path here to the cwd which should avoid
this issue.

[1]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html
Diffstat (limited to 'src/rustllvm/RustWrapper.cpp')
0 files changed, 0 insertions, 0 deletions