Page History

CodeSonar's custom checking infrastructure allows users to implement checks such as the following.

• A check for all uses of fopen().
• A check for calls to open() with only two arguments.
• A check for calls to open() where the third argument does not satisfy some specified requirement.

Umask used with chmod-style arguments

Vulnerable permission assignments

Argument to umask allows external user too much control

Argument gives read/write/search permissions to external users