From ddd289f766a573a85dc89c40c1f1592c5fb1903e Mon Sep 17 00:00:00 2001 From: Fabio Erculiani Date: Mon, 8 Aug 2011 18:14:41 +0200 Subject: [PATCH] [entropy.tools] dump_entropy_metadata(): check if file is empty before using mmap() --- libraries/entropy/tools.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/libraries/entropy/tools.py b/libraries/entropy/tools.py index 0463940a5..65de3bcb9 100644 --- a/libraries/entropy/tools.py +++ b/libraries/entropy/tools.py @@ -1391,6 +1391,9 @@ def dump_entropy_metadata(entropy_package_file, entropy_metadata_file): old_mmap = None try: f_size = os.lstat(entropy_package_file).st_size + if f_size <= 0: + # WTF! + return False # avoid security flaw caused by file size growing race condition # we conside the file size static if f_size < mmap_size_th: