[issue4489] shutil.rmtree is vulnerable to a symlink attack

Hynek Schlawack report at bugs.python.org
Fri May 18 13:30:39 CEST 2012


Hynek Schlawack <hs at ox.cx> added the comment:

I've implemented a _safe_rmtree which gets used if os.fwalk() and os.unlinkat() are available.

Test suite still passes in regression mode both on Mac (= no effect) and Linux.

Let me know if I missed something.

----------
assignee:  -> hynek
keywords: +needs review, patch
stage: needs patch -> patch review
Added file: http://bugs.python.org/file25630/rmtree-with-fwalk-v1.diff

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue4489>
_______________________________________


More information about the Python-bugs-list mailing list