gitlab.flawfinder.chown-1

137
Download Count*
MIT
License

Use fchown( ) instead.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: flawfinder.chown-1
    languages:
      - c
    message: |
      Use fchown( ) instead.
    metadata:
      cwe: "CWE-362: This accepts filename arguments; if an attacker can move those
        files, a race condition results. (CWE-362)"
      primary_identifier: flawfinder.chown-1
      secondary_identifiers:
        - name: Flawfinder - chown
          type: flawfinder_func_name
          value: chown
      license: MIT
    pattern: chown(...)
    severity: ERROR