Page History

IO.RACE

IO.TAINT.FNAME

BADFUNC.TEMP.*

File System Race Condition

Tainted Filename

A collection of warning classes that report uses of library functions associated with temporary file vulnerabilities (including name issues).

Can detect some violations of this recommendation. In particular, it warns when chown(), stat(), or chmod() are called on an open file

SV.TOCTOU.FILE_ACCESS

592 S

Fully implemented

CERT_C-FIO01-a
CERT_C-FIO01-b

Don't use chmod(), chown(), chgrp()
Usage of functions prone to race is not allowed

File or folder might change state due to access race