According to C99, Section 7.19.3 p6:
The address of the
FILE
object used to control a stream may be significant; a copy of aFILE
object need not serve in place of the original.
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
FIO38-C | low | probable | medium | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||
---|---|---|---|---|---|---|---|
|
|
|
|
...
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Other Languages
Related Guidelines
CERT This rule appears in the C++ Secure Coding Standard as : FIO38-CPP. Do not use a copy of a FILE object for input and output.
Bibliography
\[[ISO/IEC 9899:1999|AA. Bibliography#ISO/IEC 9899-1999]\] Section 7.19.3, "Files" Wiki Markup
Bibliography
...
FIO37-C. Do not assume that fgets() returns a nonempty string when successful 09. Input Output (FIO)