Time-of-check to time-of-use: Difference between revisions

Revision as of 05:48, 3 June 2010

Revision as of 21:26, 10 June 2010

Line 16:

write(fd, buffer, sizeof(buffer));

</source>

Here, ''access'' is intended to check whether the real user who executed the setuid program would normally be allowed to readwrite the file (i.e., ''access'' checks the [[real userid]] rather than [[effective userid]]).

This race condition is vulnerable to an attack: