[Matt Wilson] > We've been auditing various code lately to check for /tmp races and so > on. It seems that tempfile.mktemp() is used throughout the Python > library. While nice and portable, tempfile.mktemp() is vulnerable to > races. > ... Adding to what Guido said, the 2.1 mktemp() finally bites the bullet and uses a mutex to ensure that no two threads (within a process) can ever generate the same filename. The 2.0 mktemp() was indeed subject to races in this respect. Freedom from cross-process races relies on using the pid in the filename too.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4