Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.MTimeProtectedFastFileStorage writes it's data out to a temp file, then renames it.
the temp file path is not unique, so two processes writing the same entry at the same time, with different data, can clobber each others work.
attached patch makes sure to use tempnam() for the temporary path.
| Comment | File | Size | Author |
|---|---|---|---|
| storage-race-lulz.patch | 1.29 KB | Anonymous (not verified) | |
Comments
Comment #1
sunA race condition like that is borderline impossible to test, so RTBC if bot agrees.
Comment #2
webchickWow, very nice find!
Committed and pushed to 8.x. Thanks!