7PK - Code Quality

Opis

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that do not directly introduce a weakness or vulnerability, but indicate that the product has not been carefully developed or maintained. According to the authors of the Seven Pernicious Kingdoms, "Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an adversary it provides an opportunity to stress the system in unexpected ways."

Wpisy w tej grupie

• CWE-401 Missing Release of Memory after Effective Lifetime
• CWE-404 Improper Resource Shutdown or Release
• CWE-415 Double Free
• CWE-416 Use After Free
• CWE-457 Use of Uninitialized Variable
• CWE-474 Use of Function with Inconsistent Implementations
• CWE-475 Undefined Behavior for Input to API
• CWE-476 NULL Pointer Dereference
• CWE-477 Use of Obsolete Function

Źródła