The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Allowed-with-Review | C | 754 | Improper Check for Unusual or Exceptional Conditions |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 389 | Error Conditions, Return Values, Status Codes |
| MemberOf | Prohibited | C | 728 | OWASP Top Ten 2004 Category A7 - Improper Error Handling |
| MemberOf | Prohibited | C | 962 | SFP Secondary Cluster: Unchecked Status Condition |
| MemberOf | Prohibited | C | 1181 | SEI CERT Perl Coding Standard - Guidelines 03. Expressions (EXP) |
| MemberOf | Prohibited | C | 1306 | CISQ Quality Measures - Reliability |
| MemberOf | Prohibited | C | 1405 | Comprehensive Categorization: Improper Check or Handling of Exceptional Conditions |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-294 | Not Language-Specific Weaknesses |
| MemberOf | Prohibited | BS | BOSS-315 | Unexpected State (impact) |
| MemberOf | Prohibited | BS | BOSS-330 | Alter Execution Logic (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1181 | SEI CERT Perl Coding Standard - Guidelines 03. Expressions (EXP) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1306 | CISQ Quality Measures - Reliability |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 389 | Error Conditions, Return Values, Status Codes |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 962 | SFP Secondary Cluster: Unchecked Status Condition |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| IntegrityOther | N/A | Unexpected StateAlter Execution Logic | N/A |
N/A
| Reference | Description |
|---|---|
| CVE-2004-1395 | Certain packets (zero byte and other lengths) cause a recvfrom call to produce an unexpected return code that causes a server's listening loop to exit. |
| CVE-2002-2124 | Unchecked return code from recv() leads to infinite loop. |
| CVE-2005-2553 | Kernel function does not properly handle when a null is returned by a function call, causing it to call another function that it shouldn't. |
| CVE-2005-1858 | Memory not properly cleared when read() function call returns fewer bytes than expected. |
| CVE-2000-0536 | Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname. |
| CVE-2001-0910 | Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname. |
| CVE-2004-2371 | Game server doesn't check return values for functions that handle text strings and associated size values. |
| CVE-2005-1267 | Resultant infinite loop when function call returns -1 value. |
| Ordinality | Description |
|---|
This CWE entry is at the Base level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.
Usually primary, but can be resultant from issues such as behavioral change or API abuse. This can produce resultant vulnerabilities.
N/A
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| PLOVER | N/A | N/A | Unexpected Status Code or Return Value |
| Software Fault Patterns | SFP4 | N/A | Unchecked Status Condition |
| SEI CERT Perl Coding Standard | EXP00-PL | Imprecise | Do not return undef |
| ID | Name |
|---|