mirrors/emacs
1
Fork 0
mirror of git://git.sv.gnu.org/emacs.git synced 2026-04-24 15:22:26 -07:00
Code Issues Projects Releases Wiki Activity

Make epa-file-insert-file-contents more secure

Browse source 
* lisp/epa-file.el (epa-file-insert-file-contents):
Use `make-temp-file' instead of `make-temp-name'.
This commit is contained in:
Michael Albinus 2026-04-01 16:23:27 +02:00
parent 4baa427ee4
commit b90153d18c
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
lisp/epa-file.el
View file

@ -239,8 +239,11 @@ encryption is used."
(when (find-file-name-handler
(file-name-sans-extension file)
'insert-file-contents)
(let ((tmpfile (concat (make-temp-name temporary-file-directory)
(file-name-base file))))
(let ((tmpfile
(with-file-modes #o0600
(make-temp-file
nil nil
(file-name-extension (file-name-base file) 'period)))))
(let (file-name-handler-alist) (write-region nil nil tmpfile))
(erase-buffer)
(insert-file-contents tmpfile)