[Python-Dev] FWD: Python execvpe symlink race condition.

[Zack Weinberg]

Aahz <aahz@pythoncraft.com> writes:

>> >> It is possible, to create a link of the file to be executed (t) in the 
>> >> limited time window between the statements
>> >> os.path.exists(file) in tempfile.py and execv(t, ('blah',)) in os.py are 
>> >> executed.
>> 
>> That is exactly the signature of one of the tempfile bugs that I
>> fixed.  I do not know whether any official 2.2.x release has yet
>> occurred that includes the bugfix.
>
> That's what I suspected.  Did you check that into the 2.2.x maint
> branch?  (I remember that you did, but I'm triple-checking.)

I don't have write privileges.  I thought that it was checked into the
2.2.x maint branch but I don't actually know.

zw