Message 143192 - Python tracker

Message143192

Author	ferringb
Recipients	ferringb
Date	2011-08-30.00:31:50
SpamBayes Score	0.00039196957
Marked as misclassified	No
Message-id	<1314664313.38.0.204964767206.issue12856@psf.upfronthosting.co.za>
In-reply-to

Content
Roughly; tempfile's uniqueness is derived from a global random instance; while there are protections for thread access, a forked child process /will/ inherit that PRNG source, resulting in children/parent trying the same set of names. Mostly it's proving annoying in some code I have to deal in, although it wouldn't surprise me if someone watching a known temp location could use the predictability in some fashion. As for affect, all versions of python have this; attached patch is cut against trunk.

Content

Roughly; tempfile's uniqueness is derived from a global random instance; while there are protections for thread access, a forked child process /will/ inherit that PRNG source, resulting in children/parent trying the same set of names.

Mostly it's proving annoying in some code I have to deal in, although it wouldn't surprise me if someone watching a known temp location could use the predictability in some fashion.

As for affect, all versions of python have this; attached patch is cut against trunk.

History
Date	User	Action	Args
2011-08-30 00:31:53	ferringb	set	recipients: + ferringb
2011-08-30 00:31:53	ferringb	set	messageid: <1314664313.38.0.204964767206.issue12856@psf.upfronthosting.co.za>
2011-08-30 00:31:52	ferringb	link	issue12856 messages
2011-08-30 00:31:52	ferringb	create