CWE-394: Unexpected Status Code or Return Value
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
常见后果
影响范围: Integrity Other
技术影响: Unexpected State Alter Execution Logic
观察示例
参考: CVE-2004-1395
Certain packets (zero byte and other lengths) cause a recvfrom call to produce an unexpected return code that causes a server's listening loop to exit.
参考: CVE-2002-2124
Unchecked return code from recv() leads to infinite loop.
参考: CVE-2005-2553
Kernel function does not properly handle when a null is returned by a function call, causing it to call another function that it shouldn't.
参考: CVE-2005-1858
Memory not properly cleared when read() function call returns fewer bytes than expected.
参考: CVE-2000-0536
Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname.
参考: CVE-2001-0910
Bypass access restrictions when connecting from IP whose DNS reverse lookup does not return a hostname.
参考: CVE-2004-2371
Game server doesn't check return values for functions that handle text strings and associated size values.
参考: CVE-2005-1267
Resultant infinite loop when function call returns -1 value.
引入模式
| 阶段 | 说明 |
|---|---|
| Implementation | - |
适用平台
编程语言
分类映射
| 分类名称 | 条目ID | 条目名称 | 映射适配度 |
|---|---|---|---|
| PLOVER | - | Unexpected Status Code or Return Value | - |
| Software Fault Patterns | SFP4 | Unchecked Status Condition | - |
| SEI CERT Perl Coding Standard | EXP00-PL | Do not return undef | Imprecise |