Index: b/lib/routines.c
===================================================================
--- a/lib/routines.c
+++ b/lib/routines.c
@@ -242,3 +242,50 @@
   /* Don't complain if you can't unlink.  Who cares of a tmp file? */
   unlink (filename);
 }
+
+/*
+ * Securely generate a temp file, and make sure it gets
+ * deleted upon exit.
+ */
+static char **	tempfiles;
+static unsigned	ntempfiles;
+
+static void
+cleanup_tempfiles()
+{
+	while (ntempfiles--)
+		unlink(tempfiles[ntempfiles]);
+}
+
+char *
+safe_tempnam(const char *pfx)
+{
+	char	*dirname, *filename;
+	int	fd;
+
+	if (!(dirname = getenv("TMPDIR")))
+		dirname = "/tmp";
+
+	tempfiles = (char **) realloc(tempfiles,
+			(ntempfiles+1) * sizeof(char *));
+	if (tempfiles == NULL)
+		return NULL;
+
+	filename = malloc(strlen(dirname) + strlen(pfx) + sizeof("/XXXXXX"));
+	if (!filename)
+		return NULL;
+
+	sprintf(filename, "%s/%sXXXXXX", dirname, pfx);
+
+	if ((fd = mkstemp(filename)) < 0) {
+		free(filename);
+		return NULL;
+	}
+	close(fd);
+
+	if (ntempfiles == 0)
+		atexit(cleanup_tempfiles);
+	tempfiles[ntempfiles++] = filename;
+
+	return filename;
+}
Index: b/lib/routines.h
===================================================================
--- a/lib/routines.h
+++ b/lib/routines.h
@@ -255,7 +255,8 @@
 /* If _STR_ is not defined, give it a tempname in _TMPDIR_ */
 #define tempname_ensure(Str)				\
 do {							\
-  (Str) = (Str) ? (Str) : tempnam (NULL, "a2_");	\
+  (Str) = (Str) ? (Str) : safe_tempnam("a2_");	\
 } while (0)
+char * safe_tempnam(const char *);
 
 #endif
<form class='right' method='get' action='/guix/log/po/doc/guix-manual.fr.po'>
<input type='hidden' name='id' value='0d7ec97da02b093a259dbadb73976a3586b20c49'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=0d7ec97da02b093a259dbadb73976a3586b20c49'>root</a>/<a href='/guix/log/po?id=0d7ec97da02b093a259dbadb73976a3586b20c49'>po</a>/<a href='/guix/log/po/doc?id=0d7ec97da02b093a259dbadb73976a3586b20c49'>doc</a>/<a href='/guix/log/po/doc/guix-manual.fr.po?id=0d7ec97da02b093a259dbadb73976a3586b20c49'>guix-manual.fr.po</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/po/doc/guix-manual.fr.po?id=0d7ec97da02b093a259dbadb73976a3586b20c49&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-05-01 02:42:54 +0200'>2024-05-01</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=8bf41c80ef13ea57e834f4e23d649bd99a3e08fc'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2024-02-29 22:57:09 +0100'>2024-02-29</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=956f44b931f050fbffca51737000b9049808b3ca'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2024-02-01 18:34:22 +0100'>2024-02-01</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=6f78803b01d416ab421ba860751b764b9e4f33db'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2024-01-01 00:45:47 +0100'>2024-01-01</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=86b5fa100992527c434616482ba9cfd92b636d12'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-10-31 23:01:37 +0100'>2023-10-31</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=938a47c86d7bea785f33f42834c5c1f3dfa594b0'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-10-05 23:14:54 +0200'>2023-10-05</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=3d4d7fec05a8bdb0764a37515bb7c739b1094ab5'>doc: Fix channel name typo.</a><span class='msg-avail'>...</span></td><td>Nikolaos Chatzikonstantinou</td></tr>
<tr><td><span title='2023-09-30 19:34:32 +0200'>2023-09-30</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=8027ee43373638e0773fec3532c1a13d3da95b6a'>nls: Update translations.</a></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-08-31 21:36:03 +0200'>2023-08-31</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=57ab9536db20f98a36aeb25972137fbd752686cc'>nls: Update translations.</a></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-07-31 21:08:46 +0200'>2023-07-31</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=39fbc041f92489ec30075a85937c8a38723752dc'>nls: Update translations.</a></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-06-30 14:26:07 +0200'>2023-06-30</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=8af22b493199a17f46351c2f3d9f6ee759e48564'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-05-31 17:23:21 +0200'>2023-05-31</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=8e9e6a6482f3ba98d1cdcad344ee488e8751fee7'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Florian Pelz</td></tr>
<tr><td><span title='2023-03-07 21:14:57 +0100'>2023-03-07</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=d333958763b0840c4cd895601b079b68358a6a46'>nls: Update translations.</a></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2023-01-05 08:14:55 +0100'>2023-01-05</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=dc7eb6f07ae982b4c9d083cfb10f72cb031c0424'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2022-12-15 00:15:36 +0100'>2022-12-15</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=047ae5c3458d03bea4926e6cc1760bcfce1e2ab4'>doc: Use VM image file name consistently.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-12-04 23:15:02 +0100'>2022-12-04</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=29a09fa5e46347ca223b849c47198f82cf6df271'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2022-11-04 10:56:38 +0100'>2022-11-04</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=a65ce9dd500460af4f97e7398fb35dd817f4c677'>nls: Update translations.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2022-10-08 01:22:27 +0200'>2022-10-08</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=39311c9a8bf9d4e5db3a74d73c48fc4efe247622'>po: Fix syntax error in French translation.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2022-10-06 08:20:20 +0200'>2022-10-06</span></td><td><a href='/guix/commit/po/doc/guix-manual.fr.po?id=70fc8f6d619ce9f16a8cc0bbb10a011bd3a9997a'>nls: Update translations.</a></td><td>Julien Lepiller</td></tr>