Page Information

Title:	POS34-C. Do not call putenv() with a pointer to an automatic variable as the argument
Author:	Jeffrey Gennari	Apr 25, 2007
Last Changed by:	Joerg Herter	Oct 31, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/6NYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (1)     Page: POS30-C. Use the readlink() function properly

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

Parent Page     Page: Rule 50. POSIX (POS)

• fortify
• compass/rose
• android-unknown
• rose-complete
• rule
• pos

Time	Editor
Oct 31, 2025 04:22	Joerg Herter	View Changes
May 05, 2025 09:49	Caden Milne	View Changes
REM Cost Reform
Nov 19, 2024 08:42	Caden Milne	View Changes
Updated references from C11->C23
Nov 19, 2024 08:40	Caden Milne	View Changes
Updated references from C11->C23
Apr 16, 2024 12:32	Joerg Herter

External Links (12)
    https://pubs.opengroup.org/onlinepubs/9699919799/functions/…
    https://pubs.opengroup.org/onlinepubs/9699919799/functions/…
    https://www.mathworks.com/help/bugfinder/ref/certcrulepos34…
    www.opengroup.org/onlinepubs/009695399/functions/setenv.htm…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/Polyspace+Bug…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    www.opengroup.org/onlinepubs/009695399/functions/putenv.htm…
    https://www.securecoding.cert.org/confluence/display/seccod…

SEI CERT C Coding Standard (22)     Page: Axivion Bauhaus Suite     Page: Klocwork_V     Page: Parasoft_V     Page: Rose     Home page: SEI CERT C Coding Standard     Page: AA. Bibliography     Page: Astrée_V     Page: CodeSonar     Page: Helix QAC     Page: Axivion Bauhaus Suite_V     Page: Polyspace Bug Finder_V     Page: PC-lint Plus_V     Page: POS30-C. Use the readlink() function properly     Page: Klocwork     Page: RuleChecker     Page: Parasoft     Page: DCL30-C. Declare objects with appropriate storage durations     Page: CodeSonar_V     Page: Helix QAC_V     Page: RuleChecker_V     Page: Astrée     Page: PC-lint Plus