...
Code Block | ||||
---|---|---|---|---|
| ||||
#include <stdio.h> void open_some_file(const char *file) { FILE *f = fopen(file, "r"); if (NULL != f) { /* File exists, handle error */ } else { if (fclose(f) == EOF) { /* Handle error */ } f = fopen(file, "w"); if (NULL == f) { /* Handle error */ } /* Write to file */ if (fclose(f) == EOF) { /* Handle error */ } } } |
...
Tool | Version | Checker | Description | ||||||
---|---|---|---|---|---|---|---|---|---|
CodeSonar |
| IO.RACE | File system race condition | ||||||
Coverity |
| TOCTOU | Implemented | ||||||
Helix QAC |
| DF4851, DF4852, DF4853 | |||||||
Klocwork |
| SV.TOCTOU.FILE_ACCESS | |||||||
LDRA tool suite |
| 75 D | Partially implemented | ||||||
Parasoft C/C++test |
| CERT_C-FIO45-a | Avoid race conditions while accessing files | ||||||
Polyspace Bug Finder |
| CERT C: Rule FIO45-C | Checks for file access between time of check and use (rule fully partially covered) |
Related Vulnerabilities
...