Page History

char file_name[] = /* hard coded string */;
FILE *fp;

if (!(fp = fopen(file_name, "wb+"))) {
  /* Handle Error */
}

char file_name[L_tmpnam];
FILE* fp;

if (!tmpnam(file_name)) {
  /* Handle Error */
}

/* A TOCTOU race condition exists here */

if (!(fp = fopen(file_name, "wb+"))) {
   /* Handle Error */
}

char file_name[L_tmpnam];
int fd;

if (!(tmpnam(file_name))) {
  /* Handle Error */
}

/* A TOCTOU race condition exists here */

if ((fd = open(file_name, O_WRONLY | O_CREAT | O_EXCL | O_TRUNC, 0600)) < 0) {
   /* Handle Error */
}

char file_name[L_tmpnam_s];
int fd;

if (tmpnam_s(file_name, L_tmpnam_s) != 0) {
  /* Handle Error */
}

/* A TOCTOU race condition exists here */

if ((fd = open(file_name, O_WRONLY | O_CREAT | O_EXCL | O_TRUNC, 0600)) < 0) {
   /* Handle Error */
}