Return of Pointer Value Outside of Expected Range

Opis

A function can return a pointer to memory that is outside of the buffer that the pointer is expected to reference.

Skutki

• Confidentiality, Integrity

  Read Memory; Modify Memory

Słabość nadrzędna

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-20 Improper Input Validation

Kiedy powstaje

• Implementation

Dotyczy

Memory-Unsafe, C, C++

Uwagi

This entry should have a chaining relationship with CWE-119 instead of a parent / child relationship, however the focus of this weakness does not map cleanly to any existing entries in CWE. A new parent is being considered which covers the more generic problem of incorrect return values. There is also an abstract relationship to weaknesses in which one component sends incorrect messages to another component; in this case, one routine is sending an incorrect value to another.

Źródła

1. Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors — Katrina Tsipenyuk, Brian Chess, Gary McGraw, NIST, 2005
2. 24 Deadly Sins of Software Security — Michael Howard, David LeBlanc, John Viega, "Sin 5: Buffer Overruns." Page 89, McGraw-Hill, 2010
3. AddressSanitizer