...
TOCTOU race conditions can result in unexpected behavior, including privilege escalation.
Rule | Severity | LikelihoodRemediation Cost | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
FIO45-C | High | Probable | No | HighNo | P6 | L2 |
Automated Detection
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| IO.RACE | File system race condition | ||||||
| Coverity |
| TOCTOU | Implemented | ||||||
| Cppcheck Premium |
| premium-cert-fio45-cFully implemented | |||||||
| Helix QAC |
| DF4851, DF4852, DF4853 | |||||||
| Klocwork |
| SV.TOCTOU.FILE_ACCESS | |||||||
| LDRA tool suite |
| 75 D | Partially implemented | ||||||
| Parasoft C/C++test |
| CERT_C-FIO45-a | Avoid race conditions while accessing files | ||||||
| Polyspace Bug Finder |
| CERT C: Rule FIO45-C | Checks for file access between time of check and use (rule partially covered) |
...