<dd id="sga4y"><optgroup id="sga4y"></optgroup></dd>

<nav id="sga4y"><code id="sga4y"></code></nav>

<optgroup id="sga4y"></optgroup>

Code Quality

Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an attacker it provides an opportunity to stress the system in unexpected ways.

Contents

ABAP

• Obsolete

ActionScript

• Portability Flaw: File Separator

C/C++

• Code Correctness: Arithmetic Operation on Boolean
• Code Correctness: Function Not Invoked
• Code Correctness: Function Returns Stack Address
• Code Correctness: Macro Misuse
• Code Correctness: Memory Free on Stack Variable
• Code Correctness: Premature Thread Termination
• Dead Code
• Double Free
• Format String: Argument Number Mismatch
• Format String: Argument Type Mismatch
• Memory Leak
• Memory Leak: Reallocation
• Null Dereference
• Obsolete
• Obsolete: Inadequate Pointer Validation
• Poor Style: Redundant Initialization
• Poor Style: Value Never Read
• Poor Style: Variable Never Used
• Portability Flaw
• Redundant Null Check
• Type Mismatch: Integer to Character
• Type Mismatch: Negative to Unsigned
• Type Mismatch: Signed to Unsigned
• Undefined Behavior
• Undefined Behavior: Redundant Delete
• Uninitialized Variable
• Unreleased Resource
• Unreleased Resource: Synchronization
• Use After Free

C#/VB.NET/ASP.NET

• ASP.NET Bad Practices: Unminified Code
• Code Correctness: Class Implements ICloneable
• Code Correctness: Erroneous Class Compare
• Code Correctness: Missing [Serializable] Attribute
• Code Correctness: Misspelled Method Name
• Code Correctness: Regular Expressions Denial of Service
• Code Correctness: null Argument to Equals()
• Dead Code: Unused Field
• Dead Code: Unused Method
• Null Dereference
• Obsolete
• Portability Flaw: File Separator
• Unreleased Resource: Streams
• Unreleased Resource: Synchronization
• Unreleased Resource: Unmanaged Object(unmanaged_object)

Java/JSP

• Android Bad Practices: Use of Released Camera Resource
• Android Bad Practices: Use of Released Media Resource
• Android Bad Practices: Use of Released SQLite Resource
• Code Correctness: Call to Thread.run()
• Code Correctness: Call to notify()
• Code Correctness: Class Does Not Implement Cloneable
• Code Correctness: Erroneous Class Compare
• Code Correctness: Erroneous Negative Value
• Code Correctness: Erroneous String Compare
• Code Correctness: Erroneous Zero Value
• Code Correctness: Incorrect serialPersistentFields Modifier
• Code Correctness: Misspelled Method Name
• Code Correctness: Non-Synchronized Method Overrides Synchronized Method
• Code Correctness: Regular Expressions Denial of Service
• Code Correctness: null Argument to equals()
• Dead Code: Empty Try Block
• Dead Code: Expression is Always false
• Dead Code: Expression is Always true
• Dead Code: Unused Field
• Dead Code: Unused Method
• Null Dereference
• Obsolete
• Poor Style: Confusing Naming(class_and_member)
• Poor Style: Confusing Naming(member_and_method)
• Poor Style: Empty Synchronized Block
• Poor Style: Identifier Contains Dollar Symbol ($)
• Poor Style: Redundant Initialization
• Poor Style: Value Never Read
• Portability Flaw: File Separator
• Redundant Null Check
• Unreleased Resource: Android Camera
• Unreleased Resource: Android Media
• Unreleased Resource: Android SQLite Database
• Unreleased Resource: Files
• Unreleased Resource: Sockets
• Unreleased Resource: Streams
• Unreleased Resource: Synchronization

Objective-C

• Code Correctness: Regular Expressions Denial of Service
• Memory Leak
• Unreleased Resource: Streams

PHP

• Code Correctness: Regular Expressions Denial of Service

Python

• Portability Flaw: File Separator

PLSQL/TSQL

• Code Correctness: Erroneous Null Comparison
• Unreleased Resource
• Unreleased Resource: Cursor Snarfing

Copyright 2013 Fortify Software - All rights reserved.
(Generated from version 2013.1.1.0008 of the Fortify Secure Coding Rulepacks)