(xtmpfopen): Open temporary file exclusively, to

foil a common denial-of-service attack.
From Paul Eggert.

diff --git a/src/sort.c b/src/sort.c
index cbcbff1e72fbadd8ec67022e152c97473babb74a..fd1f4d0a0e259b3f4bf2fa191153f6034acc1db5 100644 (file)
--- a/src/sort.c
+++ b/src/sort.c
@@ -346,7 +346,7 @@ xtmpfopen (const char *file)
   FILE *fp;
   int fd;
 
-  fd = open (file, O_WRONLY | O_CREAT | O_TRUNC, 0600);
+  fd = open (file, O_WRONLY | O_CREAT | O_TRUNC | O_EXCL, 0600);
   if (fd < 0 || (fp = fdopen (fd, "w")) == NULL)
     {
       error (0, errno, "%s", file);