Marked security holes as such

vfs/extfs/deb.in

@@ -107,6 +107,7 @@ sub mcdebfs_run
 	}
 	else
 	{
+# FIXME: TMP RACE
 		$tmpcmd="/tmp/mcdebfs.run.$$";
 		&mcdebfs_copyout($archive, $filename, $tmpcmd);
 		system("chmod u+x $tmpcmd");

vfs/extfs/rpm

@@ -134,6 +134,7 @@ mcrpmfs_copyout ()
 	INFO/SIZE)		rpm -qp --qf "%{SIZE} bytes\n" $1 > $3; exit 0;;
 	*)
 	    TMPDIR=/tmp/mctmpdir.$$
+# FIXME: TMP RACE - if mkdir fails, we go there, anyway
 	    mkdir $TMPDIR
 	    cd $TMPDIR
 	    rpm2cpio $1 | cpio -iumd --quiet $2 >/dev/null

vfs/extfs/ucpio.in

@@ -48,6 +48,7 @@ mccpiofs_copyout ()
 # $3 is a name of a file within the system (to add from or extract to)
 {
     TMPDIR=/tmp/mctmpdir.$$
+# FIXME: TMP RACE: when mkdir fails, we go there, anyway
     mkdir $TMPDIR
     cd $TMPDIR
     uni_cat "$1" | cpio -icumd "$2" 2>/dev/null

vfs/extfs/ulha.in

@@ -1,4 +1,3 @@
-
 #! /bin/sh
 
 #
@@ -126,6 +125,7 @@ mc_lha_fs_copyin ()
 
 mc_lha_fs_run()
 {
+# FIXME: TMP RACE
    trap "rm $TMPCMD; exit 0" 1 2 3 4 15
    $LHA_GET $1 $2 > $TMPCMD  2> /dev/null
    chmod a+x $TMPCMD  2> /dev/null