Fix mode

pierredup · pierredup · commit 5ca7dee2fd02 · 2015-11-09T17:11:40.000+02:00
diff --git a/src/Symfony/Component/Filesystem/Filesystem.php b/src/Symfony/Component/Filesystem/Filesystem.php
@@ -487,8 +487,8 @@ public function tempnam($dir, $prefix)
             $tmpFile = $dir.'/'.$prefix.uniqid(mt_rand(), true);
 
             // Use fopen instead of file_exists as some streams do not support stat
-            // Use mode 'x' to atomically check existence and create to avoid a TOCTOU vulnerability
-            $handle = @fopen($tmpFile, 'x');
+            // Use mode 'x+' to atomically check existence and create to avoid a TOCTOU vulnerability
+            $handle = @fopen($tmpFile, 'x+');
 
             // If unsuccessful restart the loop
             if (false === $handle) {
