Closed
Description
Query PR
Language
C/C++
CVE(s) ID list
CWE
CWE-754: Improper Check for Unusual or Exceptional Conditions
Report
- in undefined behavior with uninitiated arguments and no function validation.
- uninitialized variables will be filled with random values. in case of an error in the function that fills these variables, the developer will continue to work with random values.
- look for places without checking the results of the function, provided that the arguments were not previously initialized.
- Eliminate situations when there is a comparison of the values of the arguments after the call.
Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).
- Yes
- No