CWE-544 标准化错误处理机制缺失

Missing Standardized Error Handling Mechanism

结构: Simple

Abstraction: Base

状态: Draft

被利用可能性: unkown


The software does not use a standardized method for handling errors throughout the code, which might introduce inconsistent error handling and resultant weaknesses.


If the application handles error messages individually, on a one-by-one basis, this is likely to result in inconsistent error handling. The causes of errors may be lost. Also, detailed information about the causes of an error may be unintentionally returned to the user.


  • cwe_Nature: ChildOf cwe_CWE_ID: 755 cwe_View_ID: 1000 cwe_Ordinal: Primary


范围 影响 注释
['Integrity', 'Other'] ['Quality Degradation', 'Unexpected State', 'Varies by Context']


Architecture and Design


define a strategy for handling errors of different severities, such as fatal errors versus basic log events. Use or create built-in language features, or an external package, that provides an easy-to-use API and define coding standards for the detection and handling of errors.


映射的分类名 ImNode ID Fit Mapped Node Name
CERT C Secure Coding ERR00-C Adopt and implement a consistent and comprehensive error-handling policy