According to the C Standard, 7.2123.3, paragraph 6 [ISO/IEC 9899:20112024],
The address of the
FILEobject used to control a stream may be significant; a copy of aFILEobject need is not required to serve in place of the original.
...
Using a copy of a FILE object in place of the original may result in a crash, which can be used in a denial-of-service attack.
Rule | Severity | Likelihood | Detectable | Remediation CostRepairable | Priority | Level |
|---|---|---|---|---|---|---|
FIO38-C | Low | Probable | Yes | MediumNo | P4 | L3 |
Automated Detection
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Astrée |
| file-dereference | Partially checked | ||||||
| Axivion Bauhaus Suite |
| CertC-FIO38 | Fully implemented | ||||||
| Clang |
| misc-non-copyable-objects | Checked with clang-tidy | ||||||
| Compass/ROSE | Can detect simple violations of this rule | ||||||||
| Coverity |
| MISRA C 2012 Rule 22.5 | Partially implemented | ||||||
| Cppcheck Premium |
| premium-cert-fio38-cFully implemented | |||||||
| Helix QAC |
| C1485, C5028 C++3113, C++3114 | |||||||
| Klocwork |
| MISRA.FILE_PTR.DEREF.2012 | |||||||
| LDRA tool suite |
| 591 S | Fully implemented | ||||||
| Parasoft C/C++test |
| CERT_C-FIO38-a | A pointer to a FILE object shall not be dereferenced | ||||||
| PC-lint Plus |
| 9047 | Partially supported: reports when a FILE pointer is dereferenced | ||||||
| CERT C: Rule FIO38-C | Checks for misuse of a FILE object (rule fully covered) | |||||||
| RuleChecker |
| file-dereference | Partially checked |
...
Bibliography
| [ISO/IEC 9899:20112024] | 7.2123.3, "Files" |
...