From: Ryan Davis <ryand@...>
Date: 2002-09-11T08:18:15+09:00
Subject: Re: RubyInline 1.0.4 Released! (fwd)

On 2002-09-10T17:52:14, Pat Eyler wrote:
> From: Tom Gilbert <tom@linuxbrit.co.uk>
> To: ruby-talk ML <ruby-talk@ruby-lang.org>

> So looking at this example, I guess on the second "nonslow" run it found
> /tmp/Mod_MyTest_fastfact.so there already and reused it?
> 
> I haven't looked at the sources or anything, so I'm just going from this
> one example, but what would have happened if a naughty user had come
> along first and created a /tmp/Mod_MyTest_fastfact.so that Did Mean
> Things?

You are absolutely terribly right! This was a known problem, but I
wanted/needed to get more eyeballs on this more than I needed to have
this totally secure and done. The first version (1.0.0--not publically
release) just wrote to wherever $0 was running from, which is even
more problematic. I'm open to suggestions (and diffs!) on how to
secure this properly. (I just really want to keep this nice and small
for now--at least until it has a real suite of tests)