File fix-createTempFile-vulnerability-CVE-2022-41946.patch of Package postgresql-jdbc.32827
Index: postgresql-jdbc-9.4-1201.src/org/postgresql/util/StreamWrapper.java
===================================================================
--- postgresql-jdbc-9.4-1201.src.orig/org/postgresql/util/StreamWrapper.java
+++ postgresql-jdbc-9.4-1201.src/org/postgresql/util/StreamWrapper.java
@@ -15,6 +15,7 @@ import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
+import java.nio.file.Files;
/**
* Wrapper around a length-limited InputStream.
@@ -52,7 +53,7 @@ public class StreamWrapper {
if (memoryLength == -1)
{
final int diskLength;
- final File tempFile = File.createTempFile(TEMP_FILE_PREFIX, null);
+ final File tempFile = Files.createTempFile(TEMP_FILE_PREFIX, null).toFile();
FileOutputStream diskOutputStream = new FileOutputStream(tempFile);
diskOutputStream.write(rawData);
try