Weakness (CWE)

CWE-242: Use of Inherently Dangerous Function

Base Draft

The product calls a function that can never be guaranteed to work safely, regardless of how it is used.

How to prevent it (2 mitigations)

Build and Compilation, Implementation

Identify a list of prohibited API functions and prohibit developers from using these functions, providing safer alternatives. In some cases, automatic code analysis tools or the compiler can be instructed to spot use of prohibited functions, such as the "banned.h" include file from Microsoft's SDL. [REF-554] [REF-1009] [REF-7]
Testing

Use grep or static analysis tools to spot usage of dangerous functions.

Nothing found.