Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The behavior of a program is undefined when it uses Using the value of a pointer to a FILE object after the associated file is closed is undefined behavior (see undefined behavior 148). ) Programs that close the standard streams (especially stdout but also stderr and stdin) must be careful not to use the stream objects these streams in subsequent function calls, particularly those that implicitly operate on such objects them (such as printf(), perror(), and getc()).

This rule can be generalized to other representations of files, such as an int representing a POSIX file descriptor that has been passed to close()file representations.

Noncompliant Code Example

In this noncompliant code example the printf() function is called after , the stdout stream is used after it is closed.:

Code Block
bgColor#FFcccc
langc
#include <stdio.h>
 
int close_stdout(void) {
  if (fclose(stdout) == EOF) {
    return -1;
  }
 
  printf("stdout successfully closed.\n");
  return 0;
}

...

In this compliant solution, stdout is not used again after it is closed. This must remain true for the remainder of the program, or stdout must be assigned the address of an open file object

Code Block
bgColor#ccccff
langc
#include <stdio.h>
 
int close_stdout(void) {
  if (fclose(stdout) == EOF) {
    return -1;
  }

  fprintffputs(stderr, "stdout successfully closed.\n", stderr);
  return 0;
}

Risk Assessment

Using the value of a pointer to a FILE object after the associated file is closed is undefined behavior.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO46-C

Medium

Unlikely

Medium

P4

L3

Automated Detection

Tool

Version

Checker

Description

Compass/ROSE

   

Fortify SCA

5.0

 

Can detect violations of this rule with CERT C Rule Pack

Klocwork

Include Page
Klocwork_V
Klocwork_V

RH.LEAK

 

LDRA tool suite

Include Page
LDRA_V
LDRA_V

49 D

Fully implemented

...

[IEEE Std 1003.1:2013]XSH, System Interfaces, open
[ISO/IEC 9899:2011

Subclause 77.21.3, "Files"
Subclause 7.21.5.1, "The fclose Function"

...