CWE-253—Incorrect Check of Function Return Value

名称

Incorrect Check of Function Return Value

描述

The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.

Important and common functions will return some value about the success of its actions. This will alert the program whether or not to handle any errors caused by that function.

常见后果

范围：

Availability, Integrity

影响：

Unexpected State, DoS: Crash, Exit, or Restart

注释：

An unexpected return value could place the system in a state that could lead to a crash or other unintended behaviors.

相关 CWE

• CWE-573Improper Following of Specification by Caller
• CWE-754Improper Check for Unusual or Exceptional ConditionsMedium