Page History

The C Standard, 7.2123.9.3 paragraph 2 [ISO/IEC 9899:20112024], defines the following behavior for fsetpos():

...

Invoking the fsetpos() function with any other values for pos is undefined behavior 181.

Noncompliant Code Example

...

Only the return value of an fgetpos() call is a valid argument to fsetpos(); passing a value of type fpos_t that was created in any other way is undefined behavior 181.

Compliant Solution

In this compliant solution, the initial file position indicator is stored by first calling fgetpos(), which is used to restore the state to the beginning of the file in the later call to fsetpos():

...

Misuse of the fsetpos() function can position a file position indicator to an unintended location in the file.

Rule	Severity	Likelihood	Detectable

Remediation Cost

Repairable	Priority	Level
FIO44-C	Medium	Unlikely	No

Medium

No

P4

P2

L3

Automated Detection

Tool

Version

Checker

Description

CodeSonar

Include Page

	CodeSonar_V
	CodeSonar_V

(customization)

Users can add a custom check for violations of this constraint.

Compass/ROSE

Can detect common violations of this rule. However, it cannot handle cases in which the value returned by fgetpos() is copied between several variables before being passed to fsetpos()

Cppcheck Premium

Include Page