5 ms·
He was - TOCTOU has its own wiki page [1]. These can be nastier, because they don't require the attacker to be able to submit strings or file names. [1] https:
by karatinversion 5y ago
He was - TOCTOU has its own wiki page [1]. These can be nastier, because they don't require the attacker to be able to submit strings or file names.
[1] https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
- tines 5y agoI guess I'm not sure how you would use open() that would expose a TOCTOU bug that openat () wouldn't. Can you give an example?