From: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> Date: Sun, 29 Aug 2021 12:57:05 +0000 (-0700) Subject: bpo-42278: Use tempfile.TemporaryDirectory rather than tempfile.mktemp in pydoc ... X-Git-Tag: v3.8.12~7 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=193443bb708cba3a72e99e61dd6615a94f22f9e1;p=thirdparty%2FPython%2Fcpython.git bpo-42278: Use tempfile.TemporaryDirectory rather than tempfile.mktemp in pydoc (GH-23200) (GH-28026) Co-authored-by: Ɓukasz Langa (cherry picked from commit c9227df5a9d8e958a2324cf0deba8524d1ded26a) Co-authored-by: E-Paine <63801254+E-Paine@users.noreply.github.com> --- diff --git a/Lib/pydoc.py b/Lib/pydoc.py index afec613dd85a..fe4e230e4d5e 100644 --- a/Lib/pydoc.py +++ b/Lib/pydoc.py @@ -1529,13 +1529,14 @@ def pipepager(text, cmd): def tempfilepager(text, cmd): """Page through text by invoking a program on a temporary file.""" import tempfile - filename = tempfile.mktemp() - with open(filename, 'w', errors='backslashreplace') as file: - file.write(text) - try: + with tempfile.TemporaryDirectory() as tempdir: + filename = os.path.join(tempdir, 'pydoc.out') + with open(filename, 'w', errors='backslashreplace', + encoding=os.device_encoding(0) if + sys.platform == 'win32' else None + ) as file: + file.write(text) os.system(cmd + ' "' + filename + '"') - finally: - os.unlink(filename) def _escape_stdout(text): # Escape non-encodable characters to avoid encoding errors later diff --git a/Misc/NEWS.d/next/Security/2021-08-29-12-39-44.bpo-42278.jvmQz_.rst b/Misc/NEWS.d/next/Security/2021-08-29-12-39-44.bpo-42278.jvmQz_.rst new file mode 100644 index 000000000000..db880cd9026d --- /dev/null +++ b/Misc/NEWS.d/next/Security/2021-08-29-12-39-44.bpo-42278.jvmQz_.rst @@ -0,0 +1,2 @@ +Replaced usage of :func:`tempfile.mktemp` with +:class:`~tempfile.TemporaryDirectory` to avoid a potential race condition.