Page Information

Title:	FIO21-C. Do not create temporary files in shared directories
Author:	Robert Seacord	Jan 12, 2007
Last Changed by:	Francesco Mariani	Aug 29, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/KdcxBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (1)     Page: FIO03-J. Remove temporary files before termination

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

SEI CERT C Coding Standard (3)     Page: STR30-C. Do not attempt to modify string literals     Page: FIO08-C. Take care when calling remove() on an open file     Page: MSC24-C. Do not use deprecated or obsolescent functions

Parent Page     Page: Rec. 09. Input Output (FIO)

• compass/rose
• review
• fio
• cwe-379
• exceptions
• sidebar
• android-unknown
• rose-complete
• tr24731
• recommendation

Time	Editor
Aug 29, 2025 14:06	Francesco Mariani	View Changes
Jun 16, 2025 15:30	Richard W. Laughlin	View Changes
Removed references to Annex K.
May 20, 2025 08:22	David Svoboda	View Changes
REM Cost Reform
Jan 19, 2025 17:50	Michal Rozenau	View Changes
Parasoft C/C++test 2024.2
Jul 27, 2023 14:17	Jon O'Donnell

External Links (12)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/379.html
    www.opengroup.org/onlinepubs/009695399/functions/mkstemp.ht…
    cwe.mitre.org/
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.securecoding.cert.org/confluence/display/seccod…
    https://www.mathworks.com/help/bugfinder/ref/certcrec.fio21…
    www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/avoi…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    www.opengroup.org/onlinepubs/009695399/functions/open.html

SEI CERT Oracle Coding Standard for Java (2)     Page: FIO03-J. Remove temporary files before termination     Home page: SEI CERT Oracle Coding Standard for Java

SEI CERT C++ Coding Standard (2)     Page: VOID FIO19-CPP. Do not create temporary files in shared directories     Home page: SEI CERT C++ Coding Standard

SEI CERT C Coding Standard (18)     Page: FIO15-C. Ensure that file operations are performed in a secure directory     Page: CodeSonar     Page: Parasoft_V     Page: AA. Bibliography     Page: Polyspace Bug Finder     Page: Polyspace Bug Finder_V     Page: Helix QAC_V     Page: LDRA_V     Page: Security Reviewer - Static Reviewer     Page: Rose     Page: CodeSonar_V     Page: Coverity     Page: Parasoft     Page: Security Reviewer - Static Reviewer_V     Page: LDRA     Page: BB. Definitions     Home page: SEI CERT C Coding Standard     Page: Helix QAC