Attempt to Access Child of a Non-structure Pointer

Opis

Casting a non-structure type to a structure type and accessing a field can lead to memory access errors or data corruption.

Skutki

• Integrity

  Modify Memory

  Adjacent variables in memory may be corrupted by assignments performed on fields after the cast.

• Availability

  DoS: Crash, Exit, or Restart

  Execution may end due to a memory access error.

Zapobieganie

• Requirements

  The choice could be made to use a language that is not susceptible to these issues.

• Implementation

  Review of type casting operations can identify locations where incompatible types are cast.

Przykłady podatności

• CVE-2021-3510 JSON decoder accesses a C union using an invalid offset to an object

Słabość nadrzędna

• CWE-704 Incorrect Type Conversion or Cast
• CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Kiedy powstaje

• Implementation

Dotyczy

C, C++