562
CanPrecede 669 Incorrect Resource Transfer Between Spheres 1471
Applicable Platforms
Language : C (Prevalence = Undetermined)
Language : C++ (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Other
Read Memory
Other
Be careful using vfork() and fork() in security sensitive
code. The process state will not be cleaned up and will
contain traces of data from past use.
Demonstrative Examples
Example 1:
The following code calls realloc() on a buffer containing sensitive data:
CWE Version 4.14
CWE-245: J2EE Bad Practices: Direct Management of Connections
CWE-245: J2EE Bad Practices: Direct Management of Connections