Message 322305 - Python tracker

➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author	Dhiraj_Mishra
Recipients	Dhiraj_Mishra
Date	2018-07-24.14:31:37
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1532442697.44.0.56676864532.issue34209@psf.upfronthosting.co.za>
In-reply-to

Content
File: /cpython/blob/master/Modules/posixmodule.c#L2657 #endif result = access(path->narrow, mode); Py_END_ALLOW_THREADS return_value = !result; #endif If an attacker could change anything along the path between the call `access()` and the files actually used, it may exploit the race condition or a time-of-check, time-of-use race condition https://linux.die.net/man/2/access

File: /cpython/blob/master/Modules/posixmodule.c#L2657

#endif
        result = access(path->narrow, mode);
    Py_END_ALLOW_THREADS
    return_value = !result;
#endif

If an attacker could change anything along the path between the call `access()` and the files actually used, it may exploit the race condition or a time-of-check, time-of-use race condition

https://linux.die.net/man/2/access

History
Date	User	Action	Args
2018-07-24 14:31:37	Dhiraj_Mishra	set	recipients: + Dhiraj_Mishra
2018-07-24 14:31:37	Dhiraj_Mishra	set	messageid: <1532442697.44.0.56676864532.issue34209@psf.upfronthosting.co.za>
2018-07-24 14:31:37	Dhiraj_Mishra	link	issue34209 messages
2018-07-24 14:31:37	Dhiraj_Mishra	create