Invokable Control Element with Variadic Parameters

Opis

A named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.

Skutki

• Other

  Reduce Reliability

  This issue can prevent the product from running reliably. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

  With variadic arguments, it can be difficult or inefficient for manual analysis to be certain of which function/method is being invoked.

Słabość nadrzędna

• CWE-1120 Excessive Code Complexity

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Reliability Measure (ASCRM) — Object Management Group (OMG), ASCRM-RLB-8, 2016