A static code block creates an instance of a class.
This pattern identifies situations where a storable data element or member data element is initialized with a value in a block of code which is declared as static.
This issue can make the product perform more slowly by performing initialization before it is needed. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Allowed-with-Review | C | 1176 | Inefficient CPU Computation |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1006 | Bad Coding Practices |
| MemberOf | Prohibited | C | 1132 | CISQ Quality Measures (2016) - Performance Efficiency |
| MemberOf | Prohibited | C | 1416 | Comprehensive Categorization: Resource Lifecycle Management |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-313 | Reduce Performance (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1006 | Bad Coding Practices |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| Other | N/A | Reduce Performance | N/A |
| Reference | Description |
|---|
| Ordinality | Description |
|---|---|
| Indirect | N/A |
This entry is primarily a quality issue with no direct security implications.
Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| OMG ASCPEM | ASCPEM-PRF-1 | N/A | N/A |
| ID | Name |
|---|