egcs-CVS19980627, mips-sgi-irix6.2 bootstrap problem ...

[Jeffrey A Law]

  In message < ord8br2lu6.fsf@iguacu.dcc.unicamp.br >you write:
  > Martin Knoblauch <knobi@rocketmail.com> writes:
  > 
  > >> > If it is necessary to drop the extension for
  > > security reasons, then we have
  > 
  > >  OOOp. What are the security reasons? Just curious.
  > 
  > The way gcc created temporary names was easily predictable, so any
  > user could manage to overwrite arbitrary files owned by whoever runs
  > gcc, by creating soft-links from names gcc is likely to use to files
  > he intended to overwrite.
Right.  Even if the names are less predictable it is not safe to tack
on a suffix *after* secure creation of a temporary prefix.  And since
it appears that we need to have the suffix we needed to find a way
to add the suffix in a secure manner -- that's what last night's work
should do.

jeff