software
here's the code in Microchip's xc8 avr compiler, which is actually just modified avr-gcc and thus covered by GPL and open source (they squirrel this away pretty well) that yells at you to pay them for features an open source development community built them for free
-DSKIP_LICENSE_MANAGER=1 and rebuild it from source
software
their source archives are at the bottom of https://www.microchip.com/development-tools/pic-and-dspic-downloads-archive
they delete forum posts asking about this
software
looking at their code, there is DEFINITELY a race condition in the way they call their license manager. It is checksum validated by path, THEN called by path
I bet this vuln exists in their closed-source compilers too