Spotting the Sin Pattern

Your code may be sinful if it exhibits one or more of the following properties:

  • It accesses files based on filenames beyond your control.

  • You access files using solely filenames and not file handles or file descriptors.

  • You open temporary files in public directories, where the temporary filename is guessable.



19 Deadly Sins of Software Security. Programming Flaws and How to Fix Them
Writing Secure Code
ISBN: 71626751
EAN: 2147483647
Year: 2003
Pages: 239

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net