Description: correct unsafe usage of temporary files (git-changelog,
 git-effort)
Author: Jonathan Wiltshire <jmw@debian.org>
Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490
Forwarded: no
Last-Update: 2014-09-01

---

--- git-extras-1.9.1.orig/bin/git-changelog
+++ git-extras-1.9.1/bin/git-changelog
@@ -45,7 +45,8 @@ if test "$CHANGELOG" = ""; then
     CHANGELOG='History.md';
   fi
 fi
-tmp="/tmp/changelog"
+tmp="$(mktemp --suffix=git-changelog)"
+trap "rm -rf '$tmp'" EXIT
 printf "$HEAD" > $tmp
 git-changelog $GIT_LOG_OPTS --list >> $tmp
 printf '\n' >> $tmp
--- git-extras-1.9.1.orig/bin/git-effort
+++ git-extras-1.9.1/bin/git-effort
@@ -1,9 +1,11 @@
 #!/bin/bash
 
-tmp=/tmp/.git-effort
+tmp="$(mktemp --suffix=-git-effort)"
 above='0'
 color=
 
+trap "rm -rf '$tmp'" EXIT
+
 #
 # get date for the given <commit>
 #
