[Python-Dev] FWD: Python execvpe symlink race condition.

Jeremy Hylton jeremy@alum.mit.edu
16 Feb 2003 16:58:52 -0500


On Sun, 2003-02-16 at 14:31, Guido van Rossum wrote:
> I think mktemp()'s API is unchanged if you don't count the warning
> (which I disabled anyway).  However the name template used for
> temporary files is very different -- could this affect applications?

It shouldn't affect any applications, but I'm sure it will.  The pattern
is so simple that there's probably code to delete tempfiles based on the
pattern.  Some unfortunate program probably uses mktemp() + re to get
the pid <0.9 wink>.

However, we can add the two new functions and have them use the new
pattern.  This won't break any existing code, but will let people fix
their programs without upgrading to 2.3.

Jeremy