Data Element Aggregating an Excessively Large Number of Non-Primitive Elements

Opis

The product uses a data element that has an excessively large number of sub-elements with non-primitive data types such as structures or aggregated objects.

While the interpretation of "excessively large" may vary for each product or developer, CISQ recommends a default of 5 sub-elements.

Skutki

• Other

  Reduce Performance

  This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-1093 Excessively Complex Data Representation

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Performance Efficiency Measure (ASCPEM) — Object Management Group (OMG), ASCPEM-PRF-12, 2016