[issue4489] shutil.rmtree is vulnerable to a symlink attack

Larry Hastings report at bugs.python.org
Sun Jun 24 08:36:55 CEST 2012


Larry Hastings <larry at hastings.org> added the comment:

Bikeshedding:

(os.unlink in os.supports_dir_fd and os.open in os.supports_dir_fd)

could be rewritten as

{ os.open, os.unlink } <= os.supports_dir_fd

As you were!

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue4489>
_______________________________________


More information about the Python-bugs-list mailing list