2419
Summary
This category identifies Software Fault Patterns (SFPs) within the Information Loss cluster.
Membership
Nature Type ID Name Page
MemberOf 906 SFP Primary Cluster: UI 888 2388
HasMember 221 Information Loss or Omission 888 556
HasMember 222 Truncation of Security-relevant Information 888 557
HasMember 223 Omission of Security-relevant Information 888 559
HasMember 224 Obscured Security-relevant Information by Alternate
Name
888 561
Category-998: SFP Secondary Cluster: Glitch in Computation
Category ID : 998
Summary
This category identifies Software Fault Patterns (SFPs) within the Glitch in Computation cluster
(SFP1).
Membership
Nature Type ID Name Page
MemberOf 885 SFP Primary Cluster: Risky Values 888 2382
HasMember 128 Wrap-around Error 888 339
HasMember 190 Integer Overflow or Wraparound 888 472
HasMember 191 Integer Underflow (Wrap or Wraparound) 888 480
HasMember 194 Unexpected Sign Extension 888 491
HasMember 195 Signed to Unsigned Conversion Error 888 494
HasMember 196 Unsigned to Signed Conversion Error 888 498
HasMember 197 Numeric Truncation Error 888 500
HasMember 369 Divide By Zero 888 913
HasMember 456 Missing Initialization of a Variable 888 1089
HasMember 457 Use of Uninitialized Variable 888 1094
HasMember 466 Return of Pointer Value Outside of Expected Range 888 1109
HasMember 468 Incorrect Pointer Scaling 888 1114
HasMember 475 Undefined Behavior for Input to API 888 1130
HasMember 480 Use of Incorrect Operator 888 1150
HasMember 481 Assigning instead of Comparing 888 1154
HasMember 486 Comparison of Classes by Name 888 1164
HasMember 562 Return of Stack Variable Address 888 1278
HasMember 570 Expression is Always False 888 1292
HasMember 571 Expression is Always True 888 1295
HasMember 579 J2EE Bad Practices: Non-serializable Object Stored in
Session
888 1309
HasMember 587 Assignment of a Fixed Address to a Pointer 888 1322
HasMember 594 J2EE Framework: Saving Unserializable Objects to Disk 888 1332
HasMember 597 Use of Wrong Operator in String Comparison 888 1337
HasMember 628 Function Call with Incorrectly Specified Arguments 888 1398
HasMember 681 Incorrect Conversion between Numeric Types 888 1495
HasMember 683 Function Call With Incorrect Order of Arguments 888 1504
CWE Version 4.14
CWE-1001: SFP Secondary Cluster: Use of an Improper API
CWE-1001: SFP Secondary Cluster: Use of an Improper API