diff options
| author | Alex Crichton <alex@alexcrichton.com> | 2018-07-09 15:26:57 -0700 |
|---|---|---|
| committer | Alex Crichton <alex@alexcrichton.com> | 2018-07-09 15:26:57 -0700 |
| commit | bc09fcb990a7195db540b3dcb9f0f90e52213be2 (patch) | |
| tree | 169e0a085b2bb9e8ee1346273bbab7486f4f751d /src/rustllvm/RustWrapper.cpp | |
| parent | bdd185c8970e79c2cdd3c5cfad7c4bf591836b23 (diff) | |
| download | rust-bc09fcb990a7195db540b3dcb9f0f90e52213be2.tar.gz rust-bc09fcb990a7195db540b3dcb9f0f90e52213be2.zip | |
rustc: Avoid /tmp/ in graphviz writing
This issue was reported to security@rust-lang.org by Sebastien Marie following our recent [security advisory][1]. Because `/tmp` is typically globally writable it's possible for one user to place symlinks in `/tmp` pointing to files in another user's directories, causing `rustc` to overwrite the contents of innocent files by accident. This patch instead defaults the output path here to the cwd which should avoid this issue. [1]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html
Diffstat (limited to 'src/rustllvm/RustWrapper.cpp')
0 files changed, 0 insertions, 0 deletions
