The C Standard, subclause 7.21.8.2 [ISO/IEC 9899:2011], defines the fwrite() function as follows:
...
Failure to follow the recommendation could result in a non-null-terminated string being written to a file, which will create problems when the program tries to read it back as a null-terminated byte string.
Recommendation | Severity | Likelihood |
|---|
Detectable | Repairable | Priority | Level |
|---|---|---|---|
FIO18-C | Medium | Probable |
Medium
P8
No | No | P4 | L3 |
Automated Detection
Related Guidelines
| SEI CERT C++ |
| Coding Standard | VOID FIO18-CPP. Never expect write() to terminate the writing process at a null character |
Bibliography
| [ISO/IEC 9899:2011] | Subclause 7.21.8.2, "The fwrite Function" |
| [ |
| IEEE Std 1003.1:2013] | XSH, System Interfaces, fwrite |
...
...