Time-of-check to time-of-use: Difference between revisions

Revision as of 16:32, 13 March 2008

Revision as of 22:46, 12 April 2008

Line 24:

Although this sequence of events requires precise timing, it is possible for an attacker to arrange such conditions without too much difficulty.

The implication is that the ''access'' system call, as it currently exists in Unix, should never be used except as the first step of a [[Test and Test-and-set]].

== References ==