CISQ Quality Measures (2016) - Reliability

Opis

Weaknesses in this category are related to the CISQ Quality Measures for Reliability, as documented in 2016 with the Automated Source Code CISQ Reliability Measure (ASCRM) Specification 1.0. Presence of these weaknesses could reduce the reliability of the software.

Wpisy w tej grupie

• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CWE-252 Unchecked Return Value
• CWE-396 Declaration of Catch for Generic Exception
• CWE-397 Declaration of Throws for Generic Exception
• CWE-456 Missing Initialization of a Variable
• CWE-674 Uncontrolled Recursion
• CWE-704 Incorrect Type Conversion or Cast
• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-788 Access of Memory Location After End of Buffer
• CWE-1045 Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
• CWE-1047 Modules with Circular Dependencies
• CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data
• CWE-1056 Invokable Control Element with Variadic Parameters
• CWE-1058 Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element
• CWE-1062 Parent Class with References to Child Class
• CWE-1065 Runtime Resource Management Control Element in a Component Built to Run on Application Servers
• CWE-1066 Missing Serialization Control Element
• CWE-1069 Empty Exception Block
• CWE-1070 Serializable Data Element Containing non-Serializable Item Elements
• CWE-1077 Floating Point Comparison with Incorrect Operator
• CWE-1079 Parent Class without Virtual Destructor Method
• CWE-1082 Class Instance Self Destruction Control Element
• CWE-1083 Data Access from Outside Expected Data Manager Component
• CWE-1087 Class with Virtual Method without a Virtual Destructor
• CWE-1088 Synchronous Access of Remote Resource without Timeout
• CWE-1097 Persistent Storable Data Element without Associated Comparison Control Element
• CWE-1096 Singleton Class Instance Creation without Proper Locking or Synchronization
• CWE-1098 Data Element containing Pointer Item without Proper Copy Control Element

Źródła