about summary refs log tree commit diff
path: root/src/rustllvm/RustWrapper.cpp
diff options
context:
space:
mode:
authorGuillaume Gomez <guillaume1.gomez@gmail.com>2018-07-10 22:56:43 +0200
committerGitHub <noreply@github.com>2018-07-10 22:56:43 +0200
commitd5c907890b0e9e05c66f49dc38318a256812e252 (patch)
tree8b8267daa0ccd6803ff1c902a384932d20c5bee6 /src/rustllvm/RustWrapper.cpp
parentaa9ee687f3b41773e2ea3a3a5574fc213ee2976a (diff)
parentbc09fcb990a7195db540b3dcb9f0f90e52213be2 (diff)
downloadrust-d5c907890b0e9e05c66f49dc38318a256812e252.tar.gz
rust-d5c907890b0e9e05c66f49dc38318a256812e252.zip
Rollup merge of #52195 - alexcrichton:no-tmp, r=pnkfelix
rustc: Avoid /tmp/ in graphviz writing

This issue was reported to security@rust-lang.org by Sebastien Marie following
our recent [security advisory][1]. Because `/tmp` is typically globally writable
it's possible for one user to place symlinks in `/tmp` pointing to files in
another user's directories, causing `rustc` to overwrite the contents of
innocent files by accident.

This patch instead defaults the output path here to the cwd which should avoid
this issue.

[1]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html
Diffstat (limited to 'src/rustllvm/RustWrapper.cpp')
0 files changed, 0 insertions, 0 deletions