Insufficient Adherence to Expected Conventions

Opis

The product's architecture, source code, design, documentation, or other artifact does not follow required conventions.

Skutki

• Other

  Reduce Maintainability

  This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

Słabość nadrzędna

• CWE-710 Improper Adherence to Coding Standards

Słabości podrzędne

• CWE-586 Explicit Call to Finalize()
• CWE-594 J2EE Framework: Saving Unserializable Objects to Disk
• CWE-1045 Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
• CWE-1070 Serializable Data Element Containing non-Serializable Item Elements
• CWE-1078 Inappropriate Source Code Style or Formatting
• CWE-1079 Parent Class without Virtual Destructor Method
• CWE-1082 Class Instance Self Destruction Control Element
• CWE-1087 Class with Virtual Method without a Virtual Destructor
• CWE-1091 Use of Object without Invoking Destructor Method
• CWE-1097 Persistent Storable Data Element without Associated Comparison Control Element
• CWE-1098 Data Element containing Pointer Item without Proper Copy Control Element
• CWE-1108 Excessive Reliance on Global Variables

Kiedy powstaje

• Architecture and Design
• Implementation
• Documentation

Dotyczy

Not Language-Specific