lang:

Objective C

regex:

\[.*\ writeToFile\s?\:.*\]

description:

Method writes to temporary file before writing to target file. Potential data leakage or injection.

http://www.hpenterprisesecurity.com/vulncat/en/vulncat/objc/methods_unsafe_on_public_or_tmp_directories.html
tags:
file information_leak injection
results