Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The C++ Standard, [filebuf], paragraph 2 [ISO/IEC 14882-2014], states the following:

The restrictions on reading and writing a sequence controlled by an object of class basic_filebuf<charT, traits> are the same as for reading and writing with the Standard C library FILEs.

The C Standard, subclause 7.19.5.3, paragraph 66 [ISO/IEC 9899:1999], places the following restrictions on FILE objects opened for both reading and writing [ISO/IEC 9899:1999]:

When a file is opened with update mode . . ., both input and output may be performed on the associated stream. However, output shall not be directly followed by input without an intervening call to the fflush function or to a file positioning function (fseekfsetpos, or rewind), and input shall not be directly followed by output without an intervening call to a file positioning function, unless the input operation encounters end-of-file.

...

No other std::basic_filebuf<T> function guarantees behavior as if a call were made to a standard C library file-positioning function, or std::fflush().

Note that calling Calling std::basic_ostream<T>::seekp() or std::basic_istream<T>::seekg() eventually results in a call to std::basic_filebuf<T>::seekoff() for file stream positioning. Given that std::basic_iostream<T> inherits from both std::basic_ostream<T> and std::basic_istream<T>, and std::fstream inherits from std::basic_iostream, either function is acceptable to call to ensure the file buffer is in a valid state before the subsequent IO I/O operation.

Noncompliant Code Example

...

Alternately inputting and outputting from a stream without an intervening flush or positioning call is undefined behavior.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FIO50-CPP

Low

Likely

Medium

P6

L2

Automated Detection

Tool

Version

Checker

Description

 

 

 

Axivion Bauhaus Suite

Include Page
Axivion Bauhaus Suite_V
Axivion Bauhaus Suite_V

CertC++-FIO50
CodeSonar
Include Page
CodeSonar_V
CodeSonar_V

IO.IOWOP

IO.OIWOP

Input After Output Without Positioning

Output After Input Without Positioning

Helix QAC

Include Page
Helix QAC_V
Helix QAC_V

DF4711, DF4712, DF4713


Parasoft C/C++test

Include Page
Parasoft_V
Parasoft_V

CERT_CPP-FIO50-a

Do not alternately input and output from a stream without an intervening flush or positioning call
Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V
Polyspace Bug Finder_V

CERT C++: FIO50-CPPChecks for alternating input and output from a stream without flush or positioning call (rule fully covered)
 

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

...

This rule supplements FIO39-C. Do not alternately input and output from a stream without an intervening flush or positioning call.

...



Bibliography

[ISO/IEC 9899:1999]Subclause 7.19.5.3, "The fopen Function"
[ISO/IEC 14882-2014]Clause 27, "Input/Output Library"

...


...

Image Modified Image Modified Image Modified