[Rd] Security issue with javareconf script (PR#12636)

Tom "spot" Callaway tcallawa at redhat.com
Fri Aug 29 21:22:00 CEST 2008


On Fri, 2008-08-29 at 20:04 +0200, Peter Dalgaard wrote:
> OK, committed. Not the easiest hole to exploit, I'd say (notice that
> we 
> only compile something, not execute it).
> 
> 
> .....
> 
> Oh, sh*! This is not portable! Needs code like INSTALL. Will refix.

Sorry about that. I forgot that people cared about *nix that has a
supported Java but no mktemp implementation... :)

~spot



More information about the R-devel mailing list