CWE一覧に戻る
CWE-628

正しく指定されていない引数による関数呼び出し

Function Call with Incorrectly Specified Arguments
脆弱性 レビュー中
JA

製品が正しく指定されていない引数で関数、プロシージャ、またはルーチンを呼び出し、常に正しくない動作や結果として生じる弱点につながる。

この弱点が導入される方法は複数ある:

EN

The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.

There are multiple ways in which this weakness can be introduced, including:

Scope: Other, Access Control / Impact: Quality Degradation; Gain Privileges or Assume Identity
Once found, these issues are easy to fix. Use code inspection tools and relevant compiler features to identify potential violations. Pay special attention to code that is not likely to be exercised heavily during QA.
Make sure your API's are stable before you use them in production code.
MITRE公式ページ — CWE-628