From: Fred Morcos Date: Thu, 10 Aug 2023 14:56:45 +0000 (+0200) Subject: Coding Guidelines: More descriptive section titles X-Git-Tag: rec-5.0.0-alpha1~44^2~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c80f3f9ba4a4c11e9ced4380553bc7e3b2c404ec;p=thirdparty%2Fpdns.git Coding Guidelines: More descriptive section titles --- diff --git a/CODING_GUIDELINES.md b/CODING_GUIDELINES.md index 7cfbf3950e..48cefc6e76 100644 --- a/CODING_GUIDELINES.md +++ b/CODING_GUIDELINES.md @@ -60,7 +60,7 @@ auto& firstElement = buffer.at(0); The use of `alloca()` is forbidden in the code base because it is too easy to smash the stack. -## RAII +## Resource Acquisition Is Initialization (RAII) Resource acquisition is initialization ([RAII](https://en.cppreference.com/w/cpp/language/raii)) is one of the fundamental concepts in C++. Resources are allocated during the construction of an object and destroyed when the object is itself destructed. @@ -461,7 +461,7 @@ The existing fuzzing targets are run on the OSS-Fuzz infrastructure for a short # Other Potential Issues -## TOCTOU +## Time-Of-Check to Time-Of-Use (TOCTOU) The time-of-check to time-of-use vulnerability is a very easy mistake to make when dealing with files or directories. The gist of it is that there is a small race condition between the time where a program might check the ownership, permissions or even existence of a file and the time it will actually do something with it.