[issue4489] shutil.rmtree is vulnerable to a symlink attack

Antoine Pitrou report at bugs.python.org
Sun Dec 28 20:07:15 CET 2008


Antoine Pitrou <pitrou at free.fr> added the comment:

> Using chdir() makes sense and it doesn't look like a too big problem to me:

It's a problem if another thread in the process is making file
operations using relative paths at the same time.

Since shutil functions have until now been safe against this
possibility, I don't think it's ok to make them unsafe in future
versions.

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue4489>
_______________________________________


More information about the Python-bugs-list mailing list