...
Failing to properly close files may allow an attacker to exhaust system resources and can increase the risk that data written into in-memory file buffers will not be flushed in the event of abnormal program termination.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
FIO51-CPP | Medium | Unlikely | Medium | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| ALLOC.LEAK | Leak | ||||||
| Helix QAC |
| DF4786, DF4787, DF4788 | |||||||
| Klocwork |
| RH.LEAK | |||||||
| Parasoft C/C++test |
| CERT_CPP-FIO51-a | Ensure resources are freed | |||||||
| Parasoft Insure++ |
| Runtime detection | |||||||||
| Polyspace Bug Finder |
| CERT C++: FIO51-CPP | Checks for resource leak (rule partially covered) |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...
This rule supplements FIO42-C. Close files when they are no longer needed.
Bibliography
| [ISO/IEC 14882-2014] | Subclause 27.9.1, "File Streams" |
...
...