[issue36656] Allow os.symlink(src, target, force=True) to prevent race conditions

Tom Hale report at bugs.python.org
Sat May 4 01:45:38 EDT 2019


Tom Hale <tomnott at gmail.com> added the comment:

Yes, but by default (because of difficulty) people won't check for this case:

1. I delete existing symlink in order to recreate it
2. Attacker watching symlink finds it deleted and recreates it
3. I try to create symlink, and an unexpected exception is raised

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue36656>
_______________________________________


More information about the Python-bugs-list mailing list