The behavior of a program is undefined when it uses Using the value of a pointer to a FILE
object after the associated file is closed is undefined behavior (see undefined behavior 148). ) Programs that close the standard streams (especially stdout
but also stderr
and stdin
) must be careful not to use the stream objects these streams in subsequent function calls, particularly those that implicitly operate on such objects them (such as printf()
, perror()
, and getc()
).
This rule can be generalized to other representations of files, such as an int
representing a POSIX file descriptor that has been passed to close()
file representations.
Noncompliant Code Example
In this noncompliant code example the printf()
function is called after , the stdout
stream is used after it is closed.:
Code Block | ||||
---|---|---|---|---|
| ||||
#include <stdio.h> int close_stdout(void) { if (fclose(stdout) == EOF) { return -1; } printf("stdout successfully closed.\n"); return 0; } |
...
In this compliant solution, stdout
is not used again after it is closed. This must remain true for the remainder of the program, or stdout
must be assigned the address of an open file object.
Code Block | ||||
---|---|---|---|---|
| ||||
#include <stdio.h> int close_stdout(void) { if (fclose(stdout) == EOF) { return -1; } fprintffputs(stderr, "stdout successfully closed.\n", stderr); return 0; } |
Risk Assessment
Using the value of a pointer to a FILE
object after the associated file is closed is undefined behavior.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
FIO46-C | Medium | Unlikely | Medium | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||
---|---|---|---|---|---|---|---|---|---|
5.0 | Can detect violations of this rule with CERT C Rule Pack | ||||||||
| RH.LEAK | ||||||||
| 49 D | Fully implemented |
...
[IEEE Std 1003.1:2013] | XSH, System Interfaces, open |
[ISO/IEC 9899:2011] | Subclause 77.21.3, "Files" |
...