* src/user.c (execute_menu_command): Use mc_mkstemps().
* src/util.c (mc_mkstemps): New function - safely create and
open temporary file. Return the handle and the name.
* src/util.h: Declarations for init_tmpdir() and mc_mkstemps().
Define TMPDIR_DEFAULT and SCRIPT_SUFFIX.
* vfs/direntry.c (vfs_s_open): Use mc_mkstemps. Create and close
temporary file to reserve its name on the filesystem.
(vfs_s_retrieve_file): Use mc_mkstemps().
(g_tempnam): Remove.
* vfs/extfs.c (extfs_open): Use mc_mkstemps().
* vfs/sfs.c (redirect): Likewise.
* vfs/shared_ftp_fish.c (_get_file_entry): Likewise.
(retrieve_file): Likewise.
* vfs/vfs.c (mc_def_getlocalcopy): Likewise.
* vfs/xdirentry.h: Remove declaration of g_tempnam().
when PORT_HAS_PAINT_FRAME in undefined.
* wtools.c (listbox_refresh): Disable for HAVE_X, define to
an empty macro instead.
(listbox_callback): Call listbox_refresh() regardless of HAVE_X.
(create_listbox_window): Likewise.
used by message () as printf pattern, so "%s" has to be added
if plain string must be shown but printf conversion
specification(s) may be there.
* view.c (do_view_init): ditto
* user.c (debug_out): ditto
* utilunux.c (close_error_pipe, check_error_pipe): ditto
* background.[ch], vfs/util-alone.c (message_1s): third parameter
constified
egrep_path hardcoded to "egrep" as it is done in locate_egrep ()
(locate_egrep): commented out
(rotating_dash) [!HAVE_X]: moved into do_search to prevent warning
for regexp '^' pattern also, fixed
(search) [HAVE_GNOME]: gnome_message_box_new don't expand printf
pattern, so g_strdup_printf used
* find.c (find_parameters): don't use stat structure if mc_stat failed
(invoke_subshell): ... this.
(init_subshell): Initialize raw_mode here instead of delayng it
until invoke_subshell(). Otherwise the current mode may have
been changed by edition_pre_exec(), which caused Ctrl-O to be
ignored on FreeBSD if a command has been run before switching
to the subshell.
execution for directory names containing 0x03 (intr) 0x14.
See http://www.securityfocus.com/vdb/?id=2016 for details.
Subshell still can't chdir to such directories :(
* subshell.[ch] (do_subshell_chdir): directory constified
doing in binary file it ignore skipped zero(es), so cursor is before
searched expression and next search find the same string. Also regexp
search could return wrong results for '^ ?' expressions.
(get_line_at): skipped: new parameter for number of skipped zero(es)
(search): new features of get_line_at used.
allowed luser to write '\0' char to any symlinkable file in Linux
system which don't ensure that fd's 0, 1, and 2 are open on startup
of a SUID/SGID binary.
Based on patch from bugtrack by Maurycy Prodeus <z33d@ETH-SECURITY.NET>.
