ByteOS Network

CWE-1164:Irrelevant Code

Weakness ID:1164

Version:v4.17

Weakness Name:Irrelevant Code

Vulnerability Mapping:Allowed-with-Review

Abstraction:Class

Structure:Simple

Status:Incomplete

Details Content History Observed CVE Examples Reports

▼Description

The product contains code that is not essential for execution, i.e. makes no state changes and has no side effects that alter data or control flow, such that removal of the code would have no impact to functionality or correctness.

▼Extended Description

Irrelevant code could include dead code, initialization that is not used, empty blocks, code that could be entirely removed due to optimization, etc.

▼Relationships

Relevant to the view"Research Concepts - (1000)"

Nature	Mapping	Type	ID	Name
ChildOf	Discouraged	P	710	Improper Adherence to Coding Standards
ParentOf	Allowed	V	107	Struts: Unused Validation Form
ParentOf	Allowed	B	1071	Empty Code Block
ParentOf	Allowed	V	110	Struts: Validator Without Form Field
ParentOf	Allowed	B	561	Dead Code
ParentOf	Allowed	B	563	Assignment to Variable without Use

Nature: ChildOf

Mapping: Discouraged

Type: Pillar

ID: 710

Name: Improper Adherence to Coding Standards

Nature: ParentOf

Mapping: Allowed

Type: Variant

ID: 107

Name: Struts: Unused Validation Form

Nature: ParentOf

Mapping: Allowed

Type: Base

ID: 1071

Name: Empty Code Block

Nature: ParentOf

Mapping: Allowed

Type: Variant

ID: 110

Name: Struts: Validator Without Form Field

Nature: ParentOf

Mapping: Allowed

Type: Base

ID: 561

Name: Dead Code

Nature: ParentOf

Mapping: Allowed

Type: Base

ID: 563

Name: Assignment to Variable without Use

▼Memberships

Nature	Mapping	Type	ID	Name
MemberOf	Prohibited	C	1412	Comprehensive Categorization: Poor Coding Practices

Nature: MemberOf

Mapping: Prohibited

Type:Category

ID: 1412

Name: Comprehensive Categorization: Poor Coding Practices

▼Tags

Nature	Mapping	Type	ID	Name
MemberOf	Prohibited	BS	BOSS-313	Reduce Performance (impact)
MemberOf	Prohibited	BS	BOSS-317	Reduce Reliability (impact)

Nature: MemberOf

Mapping: Prohibited

Type:BOSSView

ID: BOSS-313

Name: Reduce Performance (impact)

Nature: MemberOf

Mapping: Prohibited

Type:BOSSView

ID: BOSS-317

Name: Reduce Reliability (impact)

▼Common Consequences

Scope	Likelihood	Impact	Note
Other	N/A	Reduce Reliability	N/A
Other	N/A	Reduce Performance	N/A

Scope: Other

Likelihood: N/A

Impact: Reduce Reliability

Note:

N/A

Scope: Other

Likelihood: N/A

Impact: Reduce Performance

Note:

N/A

▼Demonstrative Examples

Example 1

The condition for the second if statement is impossible to satisfy. It requires that the variables be non-null. However, on the only path where s can be assigned a non-null value, there is a return statement.

Language: C++(Bad code)

String s = null; if (b) { s = "Yes"; return; } if (s != null) { Dead(); }

Example 2

The following code excerpt assigns to the variable r and then overwrites the value without using it.

Language: C(Bad code)

r = getName(); r = getNewBuffer(buf);

▼Observed Examples

Reference	Description
CVE-2014-1266	chain: incorrect "goto" in Apple SSL product bypasses certificate validation, allowing Adversary-in-the-Middle (AITM) attack (Apple "goto fail" bug). CWE-705 (Incorrect Control Flow Scoping) -> CWE-561 (Dead Code) -> CWE-295 (Improper Certificate Validation) -> CWE-393 (Return of Wrong Status Code) -> CWE-300 (Channel Accessible by Non-Endpoint).

Reference: CVE-2014-1266

Description:

chain: incorrect "goto" in Apple SSL product bypasses certificate validation, allowing Adversary-in-the-Middle (AITM) attack (Apple "goto fail" bug). CWE-705 (Incorrect Control Flow Scoping) -> CWE-561 (Dead Code) -> CWE-295 (Improper Certificate Validation) -> CWE-393 (Return of Wrong Status Code) -> CWE-300 (Channel Accessible by Non-Endpoint).

▼Weakness Ordinalities

Ordinality	Description
Indirect	N/A

Ordinality: Indirect

Description:

N/A

▼Vulnerability Mapping Notes

Usage:Allowed-with-Review

Reason:Abstraction

Rationale:

This CWE entry is a Class and might have Base-level children that would be more appropriate

Comments:

Examine children of this entry to see if there is a better fit