Function Call With Incorrectly Specified Argument Value

Opis

The product calls a function, procedure, or routine, but the caller specifies an argument that contains the wrong value, which may lead to resultant weaknesses.

Skutki

• Other

  Quality Degradation

Słabość nadrzędna

• CWE-628 Function Call with Incorrectly Specified Arguments

Słabości podrzędne

• CWE-560 Use of umask() with chmod-style Argument

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Uwagi

When primary, this weakness is most likely to occur in rarely-tested code, since the wrong value can change the semantic meaning of the program's execution and lead to obviously-incorrect behavior. It can also be resultant from issues in which the program assigns the wrong value to a variable, and that variable is later used in a function call. In that sense, this issue could be argued as having chaining relationships with many implementation errors in CWE.