1104
Mapped Taxonomy Name Node ID Fit Mapped Node Name
The CERT Oracle Secure
Coding Standard for Java
(2011)
ERR05-J Do not let checked exceptions escape
from a finally block
SEI CERT Perl Coding
Standard
EXP31-
PL
Imprecise Do not suppress or ignore exceptions
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-462: Duplicate Key in Associative List (Alist)
Weakness ID : 462
Structure : Simple
Abstraction : Variant
Description
Duplicate keys in associative lists can lead to non-unique keys being mistaken for an error.
Extended Description
A duplicate key entry -- if the alist is designed properly -- could be used as a constant time replace
function. However, duplicate key entries could be inserted by mistake. Because of this ambiguity,
duplicate key entries in an association list are not recommended and should not be allowed.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 694 Use of Multiple Resources with Duplicate Identifier 1523
Applicable Platforms
Language : C (Prevalence = Undetermined)
Language : C++ (Prevalence = Undetermined)
Language : Java (Prevalence = Undetermined)
Language : C# (Prevalence = Undetermined)
Likelihood Of Exploit
Low
Common Consequences
Scope Impact Likelihood
Other Quality Degradation
Varies by Context
Potential Mitigations
Phase: Architecture and Design
Use a hash table instead of an alist.
Phase: Architecture and Design
CWE Version 4.14
CWE-463: Deletion of Data Structure Sentinel
CWE-463: Deletion of Data Structure Sentinel