...
- A process does not close sensitive file descriptors before invoking a child process, but the child process is invoked before (a) the lifetime of the last pointer that stores the return value of the call has ended; or (b) before normal program termination (whichever of (a) or (b) happens first).
FIO42-C - CWE-403 = SPECIAL_CASES, where SPECIAL_CASES =
...