CWE-394: Unexpected Status Code or Return Value

Base Draft Simple

CWE版本: 4.18

更新日期: 2025-09-09

弱点描述

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

常见后果

影响范围: Integrity Other

技术影响: Unexpected State Alter Execution Logic

观察示例

参考: CVE-2004-1395

Certain packets (zero byte and other lengths) cause a recvfrom call to produce an unexpected return code that causes a server's listening loop to exit.

参考: CVE-2002-2124

Unchecked return code from recv() leads to infinite loop.

参考: CVE-2005-2553

Kernel function does not properly handle when a null is returned by a function call, causing it to call another function that it shouldn't.

参考: CVE-2005-1858

Memory not properly cleared when read() function call returns fewer bytes than expected.

参考: CVE-2000-0536

Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname.

参考: CVE-2001-0910

Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname.

参考: CVE-2004-2371

Game server doesn't check return values for functions that handle text strings and associated size values.

参考: CVE-2005-1267

Resultant infinite loop when function call returns -1 value.

引入模式

阶段 说明
Implementation -

适用平台

编程语言
Not Language-Specific (Undetermined)

分类映射

分类名称 条目ID 条目名称 映射适配度
PLOVER - Unexpected Status Code or Return Value -
Software Fault Patterns SFP4 Unchecked Status Condition -
SEI CERT Perl Coding Standard EXP00-PL Do not return undef Imprecise
关键信息

CWE ID: CWE-394

抽象级别: Base

结构: Simple

状态: Draft

相关弱点