DerScanner
Home / Vulnerability Database / C or C++ : Invalid mask
C/C++

C or C++ : Invalid mask

Classification

CWE
CWE-249CWE-560

Overview

The call umask(mask) sets the mask that changes access rights when creating new files. The permissions are as follows: ~mask & mode, where mode is the rights specified when creating a file. Thus, using the desired access rights as a parameter mask may lead to unwanted behavior of the program.

References

  1. umask(2) - Linux manual page
  2. CWE-249
  3. CWE-560
MEDIUM

DerScanner Severity Score

Do you want to fix C or C++ : Invalid mask in your application?

See also

C/C++

C or C++ : Dead store

C/C++

C or C++ : Use after free

C/C++

C or C++ : va_list uninitialized