Skip to content

fix: toctou race condition#16

Open
b4yuan wants to merge 1 commit intoyumeng5:masterfrom
IVOES:cpp/toctou-race-condition
Open

fix: toctou race condition#16
b4yuan wants to merge 1 commit intoyumeng5:masterfrom
IVOES:cpp/toctou-race-condition

Conversation

@b4yuan
Copy link
Copy Markdown

@b4yuan b4yuan commented Jun 20, 2023

vulnerability may arise when the file is checked for existence using access(emb_file, R_OK) == -1, and then subsequently opened using fopen(emb_file, "r").

fixing by using fopen and handling the case where fopen fails.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant