219672 - files in /tmp unnecessary or fixed

Status: VERIFIED DUPLICATE of bug 69938

(Core Graveyard :: File Handling, defect)

Description

[Ulrich Windl]

User-Agent:       Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.2.1) Gecko/20021204
Build Identifier: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.2.1) Gecko/20021204

I noticed when downloading to my home directory (where there is plenty of space)
that mozilla (1.0) did use temporary files in /tmp (where there was not plenty
of space), causing the download to fail.

For Mozilla 1.2 I notices that a failed EMail left over files in /tmp that were
named like "nsmail*". The problem was that permissions were restrictive, but the
name looked very fixed. A temp-file attack possible?

Apologies for reporting two bugs in one report, but they are related.

Reproducible: Always

Steps to Reproduce:
1.Download a huge file or mail a huge attachment
2 [review].Watch /tmp for new files
3.

Actual Results:  
/tmp is used where not necessary
fixed file names are used in /tmp

Expected Results:  
Make the temporary file location configurable or use the cache directory.
Use secure filenames in /tmp

Comment 1

[Nicholas Allen]

*** This bug has been marked as a duplicate of 69938 ***

Comment 2

[Ulrich Windl]

I could agree that the "download uses /tmp" is duplicate, but I did not see the
issue for temporary files from the mail client being mentioned there, so I'll
re-open.

Comment 3

[Christian :Biesinger (don't email me, ping me on IRC)]

Please file a new bug for the nsmail* files. Your two bug reports are not really
related, at least not from a code perspective, as the code responsible for
creating them is in a completely different place than the one for downloading.
(file the nsmail* bug in the mailnews product)

*** This bug has been marked as a duplicate of 69938 ***

Comment 4

[Matthias Versen [:Matti]]

verified dupe