Rule 01. File I/O and Logging (FIO)

Contents

Android Only

• Page:
  Avoid having unreachable code
• Page:
  Copy of Rule Template
• Page:
  DRD00. Do not store sensitive information on external storage (SD card) unless encrypted first
• Page:
  DRD04-J. Do not log sensitive information
• Page:
  DRD11. Ensure that sensitive data is kept secure
• Page:
  DRD12. Do not trust data that is world writable
• Page:
  DRD22. Do not cache sensitive information
• Page:
  DRD23. Do not use world readable or writeable to share files between apps
• Page:
  DRD25. Use constant-time encryption
• Page:
  DRD27-J. For OAuth, use an explicit intent method to deliver access tokens
• Page:
  Rule Template

C

C++

Java

• Page:
  FIO02-J. Detect and handle file-related errors
• Page:
  FIO03-J. Remove temporary files before termination
• Page:
  FIO05-J. Do not expose buffers or their backing arrays methods to untrusted code
• Page:
  FIO07-J. Do not let external processes block on IO buffers
• Page:
  FIO09-J. Do not rely on the write() method to output integers outside the range 0 to 255
• Page:
  FIO10-J. Ensure the array is filled when using read() to fill an array
• Page:
  FIO12-J. Provide methods to read and write little-endian data