Backport PR #5166: remove mktemp usage

mktemp is insecure, by the time the generated filename is used someone
else might have modified it.

IPython/core/page.py

@@ -208,15 +208,18 b' def page(strng, start=0, screen_lines=0, pager_cmd=None):'
                 # The default WinXP 'type' command is failing on complex strings.
                 retval = 1
             else:
-                tmpname = tempfile.mktemp('.txt')
-                tmpfile = open(tmpname,'wt')
+                fd, tmpname = tempfile.mkstemp('.txt')
+                try:
+                    os.close(fd)
+                    with open(tmpname, 'wt') as tmpfile:
                 tmpfile.write(strng)
-                tmpfile.close()
                 cmd = "%s < %s" % (pager_cmd,tmpname)
+                    # tmpfile needs to be closed for windows
                 if os.system(cmd):
                   retval = 1
                 else:
                   retval = None
+                finally:
                 os.remove(tmpname)
         else:
             try:

IPython/kernel/connect.py

@@ -92,7 +92,8 b' def write_connection_file(fname=None, shell_port=0, iopub_port=0, stdin_port=0, '
     """
     # default to temporary connector file
     if not fname:
-        fname = tempfile.mktemp('.json')
+        fd, fname = tempfile.mkstemp('.json')
+        os.close(fd)
     
     # Find open ports as necessary.
     

IPython/parallel/tests/test_client.py

@@ -20,7 +20,6 b' from __future__ import division'
 
 import time
 from datetime import datetime
-from tempfile import mktemp
 
 import zmq
 

IPython/parallel/tests/test_view.py

@@ -20,7 +20,7 b' import sys'
 import platform
 import time
 from collections import namedtuple
-from tempfile import mktemp
+from tempfile import NamedTemporaryFile
 from StringIO import StringIO
 
 import zmq
@@ -166,13 +166,12 b' class TestView(ClusterTestCase, ParametricTestCase):'
     
     def test_run_newline(self):
         """test that run appends newline to files"""
-        tmpfile = mktemp()
-        with open(tmpfile, 'w') as f:
+        with NamedTemporaryFile('w', delete=False) as f:
             f.write("""def g():
                 return 5
                 """)
         v = self.client[-1]
-        v.run(tmpfile, block=True)
+        v.run(f.name, block=True)
         self.assertEqual(v.apply_sync(lambda f: f(), pmod.Reference('g')), 5)
 
     def test_apply_tracked(self):

IPython/testing/tools.py

@@ -150,7 +150,9 b' def default_config():'
     config.TerminalInteractiveShell.colors = 'NoColor'
     config.TerminalTerminalInteractiveShell.term_title = False,
     config.TerminalInteractiveShell.autocall = 0
-    config.HistoryManager.hist_file = tempfile.mktemp(u'test_hist.sqlite')
+    f = tempfile.NamedTemporaryFile(suffix=u'test_hist.sqlite', delete=False)
+    config.HistoryManager.hist_file = f.name
+    f.close()
     config.HistoryManager.db_cache_size = 10000
     return config