...
Recommendation | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
FIO01-C | Medium | Likely | Yes | NoMedium | P12 | L1 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.RACE IO.TAINT.FNAME BADFUNC.TEMP.* BADFUNC.TMPFILE_S BADFUNC.TMPNAM_S | File System Race Condition Tainted Filename A collection of warning classes that report uses of library functions associated with temporary file vulnerabilities (including name issues). Use of tmpfile_s Use of tmpnam_s | ||||||
| Compass/ROSE | Can detect some violations of this recommendation. In particular, it warns when | ||||||||
| Coverity | 6.5 | TOCTOU | Fully implemented | ||||||
| Helix QAC |
| C5011 | |||||||
| Klocwork |
| SV.TOCTOU.FILE_ACCESS | |||||||
| LDRA tool suite |
| 592 S | Fully implemented | ||||||
| Parasoft C/C++test |
| CERT_C-FIO01-a | Don't use chmod(), chown(), chgrp() |
...