1064
...
endcase
end
endmodule
Observed Examples
Reference Description
CVE-2003-0187 Program uses large timeouts on unconfirmed connections resulting from
inconsistency in linked lists implementations.
https://www.cve.org/CVERecord?id=CVE-2003-0187
CVE-2003-0465 "strncpy" in Linux kernel acts different than libc on x86, leading to expected
behavior difference - sort of a multiple interpretation error?
https://www.cve.org/CVERecord?id=CVE-2003-0465
CVE-2005-3265 Buffer overflow in product stems the use of a third party library function that is
expected to have internal protection against overflows, but doesn't.
https://www.cve.org/CVERecord?id=CVE-2005-3265
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1001 SFP Secondary Cluster: Use of an Improper API 888 2420
MemberOf 1208 Cross-Cutting Problems 1194 2474
MemberOf 1368 ICS Dependencies (& Architecture): External Digital
Systems
1358 2505
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Notes
Theoretical
The behavior of an application that is not consistent with the expectations of the developer may
lead to incorrect use of the software.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Expected behavior violation
References
[REF-1384]"The RISC-V Instruction Set Manual Volume II: Privileged Architecture page 28". 2021.
< https://riscv.org/wp-content/uploads/2017/05/riscv-privileged-v1.10.pdf >.2024-01-16.
[REF-1385]"csr_regfile.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/blob/
b9ecdf6068445d76d6bee692d163fededf7a9d9b/piton/design/chip/tile/ariane/src/csr_regfile.sv
>.2024-01-16.
[REF-1386]"Fix for csr_regfile.sv". 2021. < https://github.com/HACK-EVENT/hackatdac21/
blob/2341c625a28d2fb87d370e32c45b68bd711cc43b/piton/design/chip/tile/ariane/src/
csr_regfile.sv#L519C4-L522C20 >.2024-01-16.
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')
Weakness ID : 441
Structure : Simple
Abstraction : Class
CWE Version 4.14
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')
CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')