Excessive Code Complexity

Opis

The code is too complex, as calculated using a well-defined, quantitative measure.

Skutki

• Other

  Reduce Maintainability; Increase Analytical Complexity

  This issue makes it more difficult to understand and/or maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

• Other

  Reduce Performance

  This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-710 Improper Adherence to Coding Standards

Słabości podrzędne

• CWE-1047 Modules with Circular Dependencies
• CWE-1056 Invokable Control Element with Variadic Parameters
• CWE-1060 Excessive Number of Inefficient Server-Side Data Accesses
• CWE-1064 Invokable Control Element with Signature Containing an Excessive Number of Parameters
• CWE-1075 Unconditional Control Flow Transfer outside of Switch Block
• CWE-1080 Source Code File with Excessive Number of Lines of Code
• CWE-1095 Loop Condition Value Update within the Loop
• CWE-1119 Excessive Use of Unconditional Branching
• CWE-1121 Excessive McCabe Cyclomatic Complexity
• CWE-1122 Excessive Halstead Complexity
• CWE-1123 Excessive Use of Self-Modifying Code
• CWE-1124 Excessively Deep Nesting
• CWE-1125 Excessive Attack Surface

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific