CWE-1045 · Słabość
Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
- Abstrakcja
- Bazowa
- Status
- Niekompletny
- Dodano
- 2 lipca 2018
- Ostatnia zmiana
- 11 grudnia 2025
Opis
A parent class has a virtual destructor method, but the parent has a child class that does not have a virtual destructor.
Skutki
Other
Reduce Reliability
This issue can prevent the product from running reliably, since the child might not perform essential destruction operations. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability, such as a memory leak (CWE-401).
Słabość nadrzędna
Kiedy powstaje
- Implementation
Dotyczy
Not Language-Specific
Źródła
- Automated Source Code Reliability Measure (ASCRM) — Object Management Group (OMG), ASCRM-RLB-17, 2016
- C++ Virtual Destructors: How to Avoid Memory Leaks — QuantStart
- Virtual Destructor — GeeksforGeeks
Wpis z katalogu CWE 4.20.