Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Wiki Markup
The {{tmpfile_s()}} function may not be compliant with \[[FI042-C|FI042-C. Temporary files must be removed before the program exits]\] for implementations where the temporary file is not removed if the program terminates abnormally.

Include Page
c:FIO39 CS mkstemp
c:FIO39 CS mkstemp
Include Page
c:FIO39 CS tmpfile_s
c:FIO39 CS tmpfile_s

Risk Assessment

A protected system file to which the symbolic link points can be overwritten when a vulnerable program is executed.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO32 FIO39-C

2 (high)

2 (probable)

2 (medium)

P8

L2

...