Security fix from Debian in the debugger (in the setterm()

function), from:
Subject: Re: Security patch from Debian?
Message-ID: <20041202024217.GA12670@londo.c47.org>

p4raw-id: //depot/perl@23656

diff --git a/lib/perl5db.pl b/lib/perl5db.pl
index 71395eb..ace1cdf 100644 (file)
--- a/lib/perl5db.pl
+++ b/lib/perl5db.pl
@@ -215,7 +215,7 @@ the TTY to use for debugging i/o.
 =item * noTTY 
 
 if set, goes in NonStop mode.  On interrupt, if TTY is not set,
-uses the value of noTTY or F</tmp/perldbtty$$> to find TTY using
+uses the value of noTTY or F<$HOME/.perldbtty$$> to find TTY using
 Term::Rendezvous.  Current variant is to have the name of TTY in this
 file.
 
@@ -6004,8 +6004,8 @@ sub setterm {
             eval "require Term::Rendezvous;" or die;
 
             # See if we have anything to pass to Term::Rendezvous.
-            # Use /tmp/perldbtty$$ if not.
-            my $rv = $ENV{PERLDB_NOTTY} || "/tmp/perldbtty$$";
+            # Use $HOME/.perldbtty$$ if not.
+            my $rv = $ENV{PERLDB_NOTTY} || "$ENV{HOME}/.perldbtty$$";
 
             # Rendezvous and get the filehandles.
             my $term_rv = new Term::Rendezvous $rv;