1452
Nature Type ID Name Page
MemberOf 879 CERT C++ Secure Coding Section 11 - Signals (SIG) 868 2379
MemberOf 986 SFP Secondary Cluster: Missing Lock 888 2411
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1142 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 08. Visibility and Atomicity (VNA)
1133 2448
MemberOf 1166 SEI CERT C Coding Standard - Guidelines 11. Signals
(SIG)
1154 2460
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Maintenance
Deeper research is necessary for synchronization and related mechanisms, including locks,
mutexes, semaphores, and other mechanisms. Multiple entries are dependent on this research,
which includes relationships to concurrency, race conditions, reentrant functions, etc. CWE-662
and its children - including CWE-667, CWE-820, CWE-821, and others - may need to be
modified significantly, along with their relationships.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding SIG00-C Mask signals handled by
noninterruptible signal handlers
CERT C Secure Coding SIG31-C CWE More
Abstract
Do not access shared objects in signal
handlers
CLASP State synchronization error
The CERT Oracle Secure
Coding Standard for Java
(2011)
VNA03-J Do not assume that a group of calls
to independently atomic methods is
atomic
Software Fault Patterns SFP19 Missing Lock
Related Attack Patterns
CAPEC-ID Attack Pattern Name
25 Forced Deadlock
26 Leveraging Race Conditions
27 Leveraging Race Conditions via Symbolic Links
29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
CWE-663: Use of a Non-reentrant Function in a Concurrent Context
Weakness ID : 663
Structure : Simple
Abstraction : Base
Description
The product calls a non-reentrant function in a concurrent context in which a competing code
sequence (e.g. thread or signal handler) may have an opportunity to call the same function or
otherwise influence its state.
Relationships
CWE Version 4.14
CWE-663: Use of a Non-reentrant Function in a Concurrent Context
CWE-663: Use of a Non-reentrant Function in a Concurrent Context