13
References
[REF-960]Object Management Group (OMG). "Automated Source Code Maintainability Measure
(ASCMM)". 2016 January. < https://www.omg.org/spec/ASCMM/ >.2023-04-07.
[REF-961]Object Management Group (OMG). "Automated Source Code Reliability Measure
(ASCRM)". 2016 January. < http://www.omg.org/spec/ASCRM/1.0/ >.
CWE-1048: Invokable Control Element with Large Number of Outward Calls
Weakness ID : 1048
Structure : Simple
Abstraction : Base
Description
The code contains callable control elements that contain an excessively large number of references
to other application objects external to the context of the callable, i.e. a Fan-Out value that is
excessively large.
Extended Description
While the interpretation of "excessively large Fan-Out value" may vary for each product or
developer, CISQ recommends a default of 5 referenced objects.
This issue makes it more difficult to maintain the product, which indirectly affects security by
making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it
easier to introduce vulnerabilities.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
CWE Version 4.14
CWE-1049: Excessive Data Query Operations in a Large Data Table
CWE-1049: Excessive Data Query Operations in a Large Data Table