summaryrefslogtreecommitdiff
path: root/WUR-REPORT
blob: ef407cfdbe319ef21d94ed19b89b0a2bd2c2771c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<unistd.h>:

lssek:   Probably should be __wur but lseek(fd,SEEK_SET,0) will succeed if
         the descriptor is fine.
lseek64: same

setuid:  will always succeed given correct privileges, so there might
         be places which don't check for it.
setreuid: same
seteuid: same
setgid:  same
setregid: same
setegid: same
setresuid: same
setresgid: same


<stdio.h>:

setvbuf:   if stream and buffer are fine and other parameters constant,
           it cannot really fail.
fseek:     see lseek
fseeko:    likewise
fgetpos:   similarly
fsetpos:   likewise


<stdlib.h>:

atexit:    it is guaranteed that a certain number of handlers can be
           registered, so some calls might need not be checked
on_exit:   same
random functions:  one might want to discard a number of results.  In any
           case, no security problem


putenv:    probably SHOULD be marked, but we'll wait a bit.
setenv:    likewise
unsetenv:  likewise
clearenv:  likewise

mbstowcs:  probably SHOULD be marked
wcstombs:  likewise

ptsname_r: probably SHOULD be marked