SEI CERT Perl Coding Standard - Guidelines 03. Expressions (EXP)
A category in the Common Weakness Enumeration published by The MITRE Corporation.
Summary
Categories in the Common Weakness Enumeration (CWE) group entries based on some common characteristic or attribute.
Weaknesses in this category are related to the rules and recommendations in the Expressions (EXP) section of the SEI CERT Perl Coding Standard.
Weaknesses
The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the pro...
The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.
The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.
The product uses an expression in which operator precedence causes incorrect logic to be used.
Sending non-cloned mutable data as a return value may result in that data being altered or deleted by the calling function.
An exception is thrown from a function, but it is not caught.
[PLANNED FOR DEPRECATION. SEE MAINTENANCE NOTES AND CONSIDER CWE-252, CWE-248, OR CWE-1069.] Ignoring exceptions and other error conditions may allow an attacker to in...
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
The product does not check for an error after calling a function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer der...
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
The product uses the wrong operator when comparing a string, such as using "==" when the .equals() method should be used instead.
Concepts
CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommen...
See Also
- SEI CERT Perl Coding Standard : Rule 03. Expressions (EXP)
The Software Engineering Institute
- SEI CERT Perl Coding Standard : Rec. 03. Expressions (EXP)
The Software Engineering Institute
Common Weakness Enumeration content on this website is copyright of The MITRE Corporation unless otherwise specified. Use of the Common Weakness Enumeration and the associated references on this website are subject to the Terms of Use as specified by The MITRE Corporation.