From eb522836572aab21c54df8485a91a3e6620bf5d1 Mon Sep 17 00:00:00 2001
From: tfmoraes <totonixsame@gmail.com>
Date: Tue, 18 May 2010 09:35:56 +0000
Subject: [PATCH] A applied a patch from Paulo Andrade, to avoid /tmp possible exploit or race condition.

---
 invesalius/project.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/invesalius/project.py b/invesalius/project.py
index 51a6072..8cfec1e 100755
--- a/invesalius/project.py
+++ b/invesalius/project.py
@@ -261,7 +261,7 @@ class Project(object):
             ow = vtk.vtkOutputWindow()
             ow.SetInstance(fow)
             
-        filelist = Extract(filename, tempfile.gettempdir())
+        filelist = Extract(filename, tempfile.mkdtemp())
         main_plist = min(filter(lambda x: x.endswith('.plist'), filelist),
                          key=lambda x: len(x))
         project = plistlib.readPlist(main_plist)
--
libgit2 0.21.2