JenkinsIcon indicating the project type

Jenkins

Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48227

Use "Files.createTempDirectory" to create temp directory

    XMLWordPrintable

    Details

    • URL:
    • Similar Issues:

      Description

      Using File.createTempFile as the first step in creating a temporary directory causes a race condition and is inherently unreliable and insecure.

        Attachments

          Issue Links

          relates to

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-47324 FilePath API in Jenkins should propagate errors

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          links to

          Web Link https://github.com/jenkinsci/jenkins/pull/3161

          Web Link sonarcloud analysis report

            Activity

            Ascending order - Click to sort in descending order
            Hide
            Permalink
            larrysingleton007 Larry Singleton added a comment -

            Link to personal sonar cloud analysis report

            Show
            larrysingleton007 Larry Singleton added a comment - Link to personal sonar cloud analysis report
            Hide
            Permalink
            oleg_nenashev Oleg Nenashev added a comment -

            Effectively this is a part of JENKINS-47324

            Show
            oleg_nenashev Oleg Nenashev added a comment - Effectively this is a part of JENKINS-47324
            Hide
            Permalink
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Larry Singleton
            Path:
            core/src/main/java/hudson/FilePath.java
            core/src/test/java/hudson/FilePathTest.java
            http://jenkins-ci.org/commit/jenkins/8e78ab1c660de81f48beecedced25d9b2cbbf64a
            Log:
            JENKINS-48227 Use "Files.createTempDirectory" to create temp directory (#3161)

            • JENKINS-48227
              Creating a utility "static Path toPath(File file) throws IOException" method,
              which wraps InvalidPathException to IOException so that it will be checked.
            • also fixed public static final reference
            • fixed broken test cases
            • added new test cases for toPath() and createTempDir()
            • Revert back to public static int
            • adjustments due to merges
            • Add posix check to determine if Posix FileAttributes should be included
              in call to Files.createTempDirectory()
            • Remove reference to private element
            • Updated to use explicit imports
            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Larry Singleton Path: core/src/main/java/hudson/FilePath.java core/src/test/java/hudson/FilePathTest.java http://jenkins-ci.org/commit/jenkins/8e78ab1c660de81f48beecedced25d9b2cbbf64a Log: JENKINS-48227 Use "Files.createTempDirectory" to create temp directory (#3161) Use "Files.createTempDirectory" to create temp directory instead See SonarQube critical vulnerability squid:S2976 (tag: owasp-a9) https://next.sonarqube.com/sonarqube/coding_rules#rule_key=squid%3AS2976 JENKINS-48227 Creating a utility "static Path toPath(File file) throws IOException" method, which wraps InvalidPathException to IOException so that it will be checked. also fixed public static final reference fixed broken test cases added new test cases for toPath() and createTempDir() Revert back to public static int adjustments due to merges Add posix check to determine if Posix FileAttributes should be included in call to Files.createTempDirectory() Remove reference to private element Updated to use explicit imports
            Hide
            Permalink
            batmat Baptiste Mathus added a comment -

            Seems to be fixed actually, isn't it?

            https://github.com/jenkinsci/jenkins/pull/3161 ?

            Larry Singleton can you comment and mark this issue as resolved if confirmed? Thanks!

            Show
            batmat Baptiste Mathus added a comment - Seems to be fixed actually, isn't it? https://github.com/jenkinsci/jenkins/pull/3161 ? Larry Singleton can you comment and mark this issue as resolved if confirmed? Thanks!
            Hide
            Permalink
            larrysingleton007 Larry Singleton added a comment -

            Yes. Issue is resolved.

            Show
            larrysingleton007 Larry Singleton added a comment - Yes. Issue is resolved.
            Hide
            Permalink
            batmat Baptiste Mathus added a comment -

            Thanks!

            Show
            batmat Baptiste Mathus added a comment - Thanks!

              People

              • Assignee:
                tonho Elton Alves
                Reporter:
                larrysingleton007 Larry Singleton
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: