-
Alex Belkin authored
Jpeg mode (as submitted by Samsung developer) uses temporary file with fixed name. This opens attacks on reading its content or overwriting any other user-writable file (with symlink). This change pre-creates temporary file with O_CREAT|O_EXCL and mode 0600. Assuming usual +t permissions for tmp this should mitigate issue.
69a00883