Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

According to C99, Section 7.19.3 p6:

The address of the FILE object used to control a stream may be significant; a copy of a FILE object need not serve in place of the original.

...

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO38-C

low

probable

medium

P4

L3

Automated Detection

Tool

Version

Checker

Description

Section

Compass/ROSE

 

 

Section

can detect simple violations of this rule

...

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Other Languages

Related Guidelines

CERT This rule appears in the C++ Secure Coding Standard as : FIO38-CPP. Do not use a copy of a FILE object for input and output.

Bibliography

Wiki Markup\[[ISO/IEC 9899:1999|AA. Bibliography#ISO/IEC 9899-1999]\] Section 7.19.3, "Files"

Bibliography

...

FIO37-C. Do not assume that fgets() returns a nonempty string when successful      09. Input Output (FIO)