...
| Code Block | ||
|---|---|---|
| ||
if (tmpfile_s(&fp)) {
/* Handle Error */
}
|
| Wiki Markup |
|---|
The {{tmpfile_s()}} function may not be compliant with \[[TMP33-C. Temporary files must be removed before the program exits]\] for implementations where the temporary file is not removed if the program terminates abnormally. |
Risk Assessment
Failure to create unique, unpredictable temporary file names can make it possible for an attacker to access or modify privileged files.
...