...
| CERT C Secure Coding Standard | FIO15-C. Ensure that file operations are performed in a secure directory |
| SEI CERT C++ Coding Standard | VOID FIO19-CPP. Do not create temporary files in shared directories |
| CERT Oracle Secure Coding Standard for Java | FIO03-J. Remove temporary files before termination |
| ISO/IEC TR 24772:2013 | Path Traversal [EWR] |
| MITRE CWE | CWE-379, Creation of temporary file in directory with insecure permissions |
...
| [HP 2003] | |
| [IEEE Std 1003.1:2013] | XSH, System Interfaces: openXSH, System Interfaces: mkdopen, mksopen |
| [ISO/IEC 9899:2011] | Subclause K.3.5.1.2, "The tmpnam_s Function"Subclause 7.21.4.4, "The tmpnam Function |
| [Kennaway 2000] | |
| [Open Group 2004] | open() |
| [Seacord 2013] | Chapter 3, "Pointer Subterfuge" Chapter 8, "File I/O" |
| [Viega 2003] | Section 2.1, "Creating Files for Temporary Use" |
| [Wheeler 2003] | Chapter 7, "Structure Program Internals and Approach" |
...