Page Information

Title:	FIO01-C. Be careful using functions that use file names for identification
Author:	Jeffrey Gennari	Aug 11, 2006
Last Changed by:	David Svoboda	May 20, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/E9cxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (4)     Page: FIO05-C. Identify files using multiple file attributes     Page: ENV33-C. Do not call system()     Page: POS35-C. Avoid race conditions while checking for the existence of a symbolic link     Page: FIO15-C. Ensure that file operations are performed in a secure directory

Android (1)     Page: Unknown Applicability (C Rules/Recomendations)

Parent Page     Page: Rec. 09. Input Output (FIO)

• ldra
• compass/rose
• cwe-367
• fio
• android-unknown
• rose-partial
• opening-files
• posix
• recommendation
• filename
• cwe-676
• cwe-73
• klocwork

Time	Editor
May 20, 2025 08:14	David Svoboda	View Changes
REM Cost Reform
Jan 19, 2025 17:50	Michal Rozenau	View Changes
Parasoft C/C++test 2024.2
Jul 27, 2023 14:16	Jon O'Donnell	View Changes
Apr 20, 2023 06:08	Jill Britton	View Changes
Apr 27, 2022 08:48	Jill Britton

External Links (8)
    cwe.mitre.org/data/definitions/676.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    developer.apple.com/documentation/Security/Conceptual/Secur…
    cwe.mitre.org/data/definitions/73.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    cwe.mitre.org/data/definitions/367.html
    cwe.mitre.org/

SEI CERT C Coding Standard (19)     Page: LDRA_V     Page: Klocwork     Page: BB. Definitions     Page: Helix QAC_V     Page: Parasoft     Page: CodeSonar_V     Page: FIO03-C. Do not make assumptions about fopen() and file creation     Page: Parasoft_V     Page: FIO10-C. Take care when using the rename() function     Page: Coverity     Page: FIO15-C. Ensure that file operations are performed in a secure directory     Page: Rose     Page: Klocwork_V     Page: CodeSonar     Page: Helix QAC     Page: LDRA     Page: AA. Bibliography     Page: FIO08-C. Take care when calling remove() on an open file     Home page: SEI CERT C Coding Standard

SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard     Page: VOID FIO01-CPP. Be careful using functions that use file names for identification