[Python-modules-team] Bug#560755: Potential patch to fix this bug

[Kumar Appaiah]

tags 560755 + patch
thanks

Hi!

I have a potential fix for this bug. My approach is based on the
premise that the make-temp-file function provided from Emacs 22
onwards is safe. So, I backport the method to the rst.el file, and
bind it to the symbol rst--make-temp-file as follows:

- If the Emacs version is less than 22, use this custom version. This
  works on Emacs 21, I tested it.
- If the Emacs version is 22 or more, bind rst--make-temp-file to the
  make-temp-fil provided in the Emacs Lisp libraries.

I don't see a solution for removing the temporary files, though.

I am no expert on security or Emacs Lisp, but I hope this patch
provides a start.

HTH, and thanks!

Kumar
-- 
Bigotry tries to keep truth safe in its hand
With a grip that kills it.
- Rabindranath Tagore (Fireflies, 1928)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: python-docutils_fix.diff
Type: text/x-diff
Size: 3831 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/python-modules-team/attachments/20091212/2471da32/attachment.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/python-modules-team/attachments/20091212/2471da32/attachment.pgp>