Error Conditions, Return Values, Status Codes |
Category ID: 389 (Category) | Status: Incomplete |
Description Summary
If a function in a product does not generate the correct return/status codes, or if the product does not handle all possible return/status codes that could be generated by a function, then security issues may result.
Extended Description
This type of problem is most often found in conditions that are rarely encountered during the normal operation of the product. Presumably, most bugs related to common conditions are found and eliminated during development and testing. In some cases, the attacker can directly control or influence the environment to trigger the rare conditions.
Ordinality | Description |
---|---|
Primary | (where the weakness exists independent of other weaknesses) |
Nature | Type | ID | Name | View(s) this relationship pertains to![]() |
---|---|---|---|---|
ChildOf | ![]() | 388 | Error Handling | Development Concepts (primary)699 |
ParentOf | ![]() | 248 | Uncaught Exception | Development Concepts699 |
ParentOf | ![]() | 252 | Unchecked Return Value | Development Concepts699 |
ParentOf | ![]() | 253 | Incorrect Check of Function Return Value | Development Concepts699 |
ParentOf | ![]() | 390 | Detection of Error Condition Without Action | Development Concepts (primary)699 |
ParentOf | ![]() | 391 | Unchecked Error Condition | Development Concepts (primary)699 |
ParentOf | ![]() | 392 | Failure to Report Error in Status Code | Development Concepts (primary)699 |
ParentOf | ![]() | 393 | Return of Wrong Status Code | Development Concepts (primary)699 |
ParentOf | ![]() | 394 | Unexpected Status Code or Return Value | Development Concepts (primary)699 |
ParentOf | ![]() | 395 | Use of NullPointerException Catch to Detect NULL Pointer Dereference | Development Concepts (primary)699 |
ParentOf | ![]() | 396 | Declaration of Catch for Generic Exception | Development Concepts (primary)699 |
ParentOf | ![]() | 397 | Declaration of Throws for Generic Exception | Development Concepts (primary)699 |
ParentOf | ![]() | 584 | Return Inside Finally Block | Development Concepts (primary)699 |
Many researchers focus on the resultant weaknesses and do not necessarily diagnose whether a rare condition is the primary factor. However, since 2005 it seems to be reported more frequently than in the past. This subject needs more study. |
Mapped Taxonomy Name | Node ID | Fit | Mapped Node Name |
---|---|---|---|
PLOVER | Error Conditions, Return Values, Status Codes |
Submissions | ||||
---|---|---|---|---|
Submission Date | Submitter | Organization | Source | |
PLOVER | Externally Mined | |||
Modifications | ||||
Modification Date | Modifier | Organization | Source | |
2008-09-08 | CWE Content Team | MITRE | Internal | |
updated Relationships, Other Notes, Taxonomy Mappings | ||||
2008-10-14 | CWE Content Team | MITRE | Internal | |
updated Description | ||||
2009-12-28 | CWE Content Team | MITRE | Internal | |
updated Other Notes, Weakness Ordinalities |