SEI CERT C Coding Standard

Space shortcuts

Page tree

Versions Compared

Old Version 86

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 87

changes.mady.by.user Aaron Ballman

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated the Windows code example to be more realistic and properly release resources

...

Code Block
bgColor#ccccff
langc
HANDLE hFile = CreateFile(
  pFullPathNamefile_name, GENERIC_READ | GENERIC_WRITE, 0, 0, 
                          NULL, OPEN_EXISTING, 0FILE_ATTRIBUTE_NORMAL, NULL
);
if (hFile == INVALID_HANDLE_VALUE) {
  /* Handle error */
}
 else {
  if (GetFileType(hFile) != FILE_TYPE_DISK) {
    /* Handle error */
  CloseHandle(hFile);
} else {
  /* Operate on file */
  CloseHandle(hFile);
}

Risk Assessment

Allowing operations that are appropriate only for files to be performed on devices can result in denial-of-service attacks or more serious exploits depending on the platform.

...