Skip to content
OpenAdvisories

Weakness (CWE)

CWE-768: Incorrect Short Circuit Evaluation

Base Incomplete

The product contains a conditional statement with multiple logical expressions in which one of the non-leading expressions may produce side effects.

More detail

If the first condition of an "or" statement is assumed to be true under normal circumstances, or if the first condition of an "and" statement is assumed to be false, then any subsequent conditional may contain its own logic errors that are not detected during code review or testing.

How to prevent it (1 mitigation)

  1. Implementation

    Minimizing the number of statements in a conditional that produce side effects will help to prevent the likelihood of short circuit evaluation to alter control flow in an unexpected way.

Source: MITRE CWE-768

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.