Common Quality EnumerationA Community-Developed Dictionary of Quality Issues |
|
|
Quality Issues Organized by Practices |
View ID: 9002 | Maturity: Preliminary |
View Objective
This view (graph) organizes Quality Issues based on the software practices in which they appear.
Formal CQE IDs (this view) | Micro Elements (this view) | Total Catalog | |||||
---|---|---|---|---|---|---|---|
Total Elements | 76 | out of | 160 | 40 | out of | 66 | 226 |
Views | 0 | out of | 7 | 7 | |||
Quality_Characteristics | 0 | out of | 41 | 41 | |||
Quality_Issues | 76 | out of | 112 | 112 | |||
Practices | 40 | out of | 40 | 40 | |||
Consequences | 0 | out of | 26 | 26 |
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
HasMember | Pr Practice | 9016 | Modular Development | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9037 | Resource Management | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9063 | Authentication Practices | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9078 | Memory Management | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9083 | Iteration Control | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9085 | Numerical Conversion | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9088 | Reuse | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9089 | Code Comments | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9124 | Layered Architectures | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9131 | Error/Exception Handling | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9136 | Cryptography | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9170 | Initialization Practices | Quality Issues Organized by Practices (primary)9002 |
HasMember | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
Allocation of Memory without Associated Release |
Quality Issue ID: 9112 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where a memory resource is explicitly allocated via the ManagesResource action to the storable or member data element, which is used throughout the application, along the sequence composed of ActionElements with DataRelations relations, some of which being part of named callable and method control elements, none of which being a memory release statement.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-14 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-14. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Architecture with Number of Horizontal Layers Outside of Expected Range |
Quality Issue ID: 9007 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the model of the architectural layers contains too many or too few horizontal layers, based on its number of horizontal layers (that is, excluding the vertical utility layers) that is smaller than the threshold value or greater than the threshold value. The default minimal value is 4 and the default max value is 8.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9124 | Layered Architectures | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-9 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-9. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Array Index Improper Input Neutralization |
Quality Issue ID: 129 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9049 | Array Indexing | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9038 | Loss of Data Integrity | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-129 |
CWE | 2.11 | 129 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-129. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9049 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of array index bounds incurs the risk of corruption of relevant memory, and perhaps instructions, possibly leading to a crash, the risk of data integrity loss, and the risk of unauthorized access to sensitive data.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9022 | Memory Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 129 | Array Index Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
Authentication Practices |
Practice ID: 9063 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring weak authentication practices incurs the risk of exposing resources and functionality to unintended actors, possibly leading to compromised sensitive information and even the execution of arbitrary code.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9032 | Exposed Resources | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9035 | Exposed Functionality | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9189 | Information Disclosure | Default Graph (primary)9001 |
ParentOf | Is Issue | 798 | Hard-Coded Credentials Usage for Remote Authentication | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Broken or Risky Cryptographic Algorithm Usage |
Quality Issue ID: 327 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9136 | Cryptography | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-327 |
CWE | 2.11 | 327 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-327. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Buffer Copy without Checking Size of Input |
Quality Issue ID: 120 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9078 | Memory Management | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9022 | Memory Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9038 | Loss of Data Integrity | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-120 |
ASCSM | 1 | ASCSM-CWE-120 |
CWE | 2.11 | 120 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-120. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-120. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Practice ID: 9096 | Maturity: Preliminary |
Description Summary
Extended Description
Software deployed in distributed environment that does not maintain redundancy of data (such as cache) and code increases the time with which they are accessed.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9037 | Resource Management | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9140 | Increased (Access) Time | Default Graph (primary)9001 |
ParentOf | Is Issue | 9069 | Data Access Operations Outside of Expected Data Manager Component | Quality Issues Organized by Practices (primary)9002 |
Callable and Method Control Element Number of Outward Calls |
Quality Issue ID: 9024 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9016 | Modular Development | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9141 | Excessive Propagation of Modification Impacts | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-4 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-4. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Child Class Element without Virtual Destructor unlike its Parent Class Element |
Quality Issue ID: 9013 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-17 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-17. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Class Element with Virtual Method Element without Virtual Destructor |
Quality Issue ID: 9166 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-15 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-15. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Class Instance Self Destruction Control Element |
Quality Issue ID: 9156 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-7 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-7. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Class with an Excessive Inheritance Level |
Quality Issue ID: 9123 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the inheritance level of the class element is considered as too large, based on its number of parent class units which exceeds the default threshold value of 7.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-17 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-17. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Class with Excessive Number of Child Classes |
Quality Issue ID: 9165 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the number of children of the class element is considered as too large, based on its number of child classes which exceeds the default threshold value of 10.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-18 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-18. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Practice ID: 9089 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not properly represent comments can cause excessive modification effort.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
ParentOf | Is Issue | 9161 | Excessive Volume of Commented-out Code | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9176 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring known under-efficient coding practices requires excessive computational resources.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
ParentOf | Is Issue | 252 | Unchecked Return Parameter Value of Invokable Control Element with Read, Write, and Manage Access to Platform or Data Resource | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 456 | Storable and Member Data Element Missing Initialization | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 704 | Incorrect Type Conversion or Cast | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9004 | Static Member Data Element outside of a Singleton Class Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9005 | Data Element Aggregating an Excessively Large Number of Non-Primitive Elements | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9014 | Creation of Immutable Text Using String Concatenation | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9062 | Invokable Control Element with Variadic Parameter Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9100 | Runtime Resource Management Control Element in a Component Built to Run on Application Servers | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9102 | Missing Serialization Control Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9110 | Serializable Data Element Containing non-Serializable Item Elements | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9112 | Allocation of Memory without Associated Release | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9116 | Data Resource Access without Use of Connection Pooling | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9138 | Float Type Storable and Member Data Element Comparison with Equality Operator | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9156 | Class Instance Self Destruction Control Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9182 | Use of Data Element without Invoking Deconstructor Method | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9193 | Persistent Storable Data Element without Associated Comparison Control Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9194 | Storable or Member Data Element containing Pointer Item Element without Proper Copy Control Element | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Creation of Immutable Text Using String Concatenation |
Quality Issue ID: 9014 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element creates immutable text data elements via the string concatenation statement, which could be avoided by using text buffer data elements.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-2 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-2. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Cross-site Scripting Improper Input Neutralization |
Quality Issue ID: 79 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9097 | Output Generation | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-79 |
CWE | 2.11 | 79 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-79. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9136 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 327 | Broken or Risky Cryptographic Algorithm Usage | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Data Access Constructs |
Practice ID: 9105 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring known under-efficient SQL Query and Data Access constructs requires excessive computational resources.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
ParentOf | Is Issue | 9027 | Excessive Data Query Operations in a Large Data Table | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9103 | Excessive Execution of Sequential Searches of Data Resource | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9104 | Data Encapsulation | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9175 | Excessive Number of Indices for a Large Data Table | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9187 | Excessive Index Range Scan for a Data Resource | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Data Access Control Element from Outside Designated Data Manager Component |
Quality Issue ID: 9159 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9076 | Data Integrity Management | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-10 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-10. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Data Access Operations Outside of Expected Data Manager Component |
Quality Issue ID: 9069 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element executes the data action although it is not part of the central data manager identified as one of the dedicated data access components from the data access components list. The component can be either client-side either server-side, which means that not all server-side components are allowed to handle data accesses. The data access component can be either client-side either server-side, which means that data access components can be developed using non-SQL languages. The pattern simply identifies situations where the implementation does not follow the intended design, regardless of the design.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9096 | Cache Maintenance | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9140 | Increased (Access) Time | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-11 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-11. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Data Element Aggregating an Excessively Large Number of Non-Primitive Elements |
Quality Issue ID: 9005 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the data type of the storable data element aggregates storable data elements with non-primitive data types, which is considered too large because it exceeds the threshold value, which defaults to 5.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-12 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-12. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Data Element Declared Public |
Quality Issue ID: 9153 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the storable data element or member data element is declared as public through the Create action.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9104 | Data Encapsulation | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-15 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-15. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Practice ID: 9104 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of data encapsulation incurs the risk of data corruption.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
ParentOf | Is Issue | 9153 | Data Element Declared Public | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9181 | Method Containing Access of a Member Element from Another Class | Quality Issues Organized by Practices (primary)9002 |
Data Integrity Management |
Practice ID: 9076 | Maturity: Preliminary |
Description Summary
Extended Description
Software without consistently-enforced approach to data integrity management incurs the risk of behaving unexpectedly.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
ParentOf | Is Issue | 9159 | Data Access Control Element from Outside Designated Data Manager Component | Quality Issues Organized by Practices (primary)9002 |
Data Resource Access without Use of Connection Pooling |
Quality Issue ID: 9116 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element executes the data resource management action not using connection pooling capability. The usage of connection pooling capability is technology dependent. As examples, connection pooling is disabled with the addition of 'Pooling=false' to the connection string with ADO.NET and the value of 'com.sun.jndi.ldap.connect.pool' environment parameter in Java.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-13 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-13. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Declaration of Catch for Generic Exception |
Quality Issue ID: 396 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9010 | Execution Status Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9131 | Error/Exception Handling | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9154 | Poisoned Data Usage | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-396 |
ASCSM | 1 | ASCSM-CWE-396 |
CWE | 2.11 | 396 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-396. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-396. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Declaration of Throws for Generic Exception |
Quality Issue ID: 397 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9010 | Execution Status Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9131 | Error/Exception Handling | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9154 | Poisoned Data Usage | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-397 |
ASCSM | 1 | ASCSM-CWE-397 |
CWE | 2.11 | 397 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-397. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-397. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Embedded Network Configuration |
Practice ID: 9068 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring network configuration within its own code incurs the risk of failure when the remote resource changes.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
ParentOf | Is Issue | 9042 | Initialization with Hard-Coded Network Resource Configuration Data | Quality Issues Organized by Practices (primary)9002 |
Empty Exception Block |
Quality Issue ID: 9108 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the exception handling block (such as a Catch and Finally block) of the named callable and method control elements does not contain any other control element.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9131 | Error/Exception Handling | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-1 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-1. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Error/Exception Handling |
Practice ID: 9131 | Maturity: Preliminary |
Description Summary
Extended Description
Software without consistent and complete handling of errors and exceptions makes it impossible to accurately identify and adequately respond to unusual and unexpected situations.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
ParentOf | Is Issue | 252 | Unchecked Return Parameter Value of Invokable Control Element with Read, Write, and Manage Access to Platform or Data Resource | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 396 | Declaration of Catch for Generic Exception | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 397 | Declaration of Throws for Generic Exception | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9108 | Empty Exception Block | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Excessive Cyclomatic Complexity Within an Invokable Control Element |
Quality Issue ID: 9185 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element has a control flow with a Cyclomatic Complexity which is greater than the default threshold value of 20.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9121 | Structured Programming | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Is Issue | 9222 | Excessive Cyclomatic Complexity | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-11 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-11. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Excessive Data Query Operations in a Large Data Table |
Quality Issue ID: 9027 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the data table is considered very large, based on its number of rows which exceeds the threshold value, and where it is accessed by the data actions which is considered to be too complex, based on its number of joins between tables which exceeds the threshold value, and its number of sub-queries which exceeds the threshold value. The default value for number of rows is 1000000. The default value for number of joins is 5. The default value for number of sub-queries is 3.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-4 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-4. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Excessive Execution of Sequential Searches of Data Resource |
Quality Issue ID: 9103 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the syntax of the ReadsColumnSet action and the index configuration of the SQL table or SQL view causes the DBMS to run sequential searches.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-5 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-5. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Excessive Index Range Scan for a Data Resource |
Quality Issue ID: 9187 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the data table is considered as very large, based on its number of rows which exceeds the threshold value, and where its index is considered as too large, based on its range value which exceeds the threshold value. The default value for number of rows is 1000000 and the default value for index range is 10.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-7 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-7. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Excessive Number of Data Accesses using Inefficient Procedures |
Quality Issue ID: 9077 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the server-side non-stored callable control elements in the data manager resource, embeds number of data resource access, which is considered too large because it exceeds the default threshold value of 5.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9167 | Stored Procedures & Functions | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-9 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-9. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Excessive Number of Indices for a Large Data Table |
Quality Issue ID: 9175 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the data table is considered as very large, based on its number of rows which exceeds the threshold value, and is considered to have too many indices, based on its number of indices which exceeds the threshold value. The default value for number of rows is 1000000. The default value for number of indices is 3.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9105 | Data Access Constructs | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-6 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-6. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Excessive Use of Hard-Coded Literals in Initialization |
Quality Issue ID: 9046 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the literal value element is used to initialize the storable data element or member data element via the Write action; exceptions are simple integers and static of constant storable or member data elements.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9142 | Hard-Coding | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9132 | Reduced Adaptability | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-3 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-3. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Excessive Use of Unconditional Branching |
Quality Issue ID: 9220 | Maturity: Preliminary |
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9121 | Structured Programming | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
SQAE | 7.1 |
Robert A. Martin and
Lawrence H. Shafer. "Providing a Framework for Effective Software Quality
Assessment". 6th Annual International Symposium of
INCOSE. 1996-07-09. <https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT>. |
Excessive Volume of Commented-out Code |
Quality Issue ID: 9161 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element contains too much commented-out code items, based on the percentage of instructions in the callable or method control element that are in comments which exceeds the default threshold value of 2%.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9089 | Code Comments | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-6 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-6. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Execution Status Control |
Practice ID: 9010 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of accurate execution status control incurs the risk of bad data being used in operations, possibly leading to a crash or other unintended behaviors.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
ParentOf | Is Issue | 252 | Unchecked Return Parameter Value of Invokable Control Element with Read, Write, and Manage Access to Platform or Data Resource | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 396 | Declaration of Catch for Generic Exception | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 397 | Declaration of Throws for Generic Exception | Quality Issues Organized by Practices (primary)9002 |
Expired or Released Resource Usage |
Quality Issue ID: 672 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9080 | Resource Lifecycle | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9031 | Denial of Service | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-672 |
CWE | 2.11 | 672 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-672. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9183 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of file path control incurs the risk of exposition of sensitive data, the risk of corruption of critical files, such as programs, libraries, or important data used in protection mechanisms.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9189 | Information Disclosure | Default Graph (primary)9001 |
ParentOf | Is Issue | 22 | Path Traversal Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9095 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of file upload control incurs the risk of arbitrary code execution or other unexpected behaviors based on the type, extension, or other properties of the uploaded file.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
ParentOf | Is Issue | 434 | File Upload Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
File Upload Improper Input Neutralization |
Quality Issue ID: 434 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9095 | File Upload Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-434 |
CWE | 2.11 | 434 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-434. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Float Type Storable and Member Data Element Comparison with Equality Operator |
Quality Issue ID: 9138 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-9 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-9. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Format String Improper Input Neutralization |
Quality Issue ID: 134 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9129 | Output Formatting Control | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9189 | Information Disclosure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-134 |
CWE | 2.11 | 134 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-134. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Hard-Coded Credentials Usage for Remote Authentication |
Quality Issue ID: 798 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9063 | Authentication Practices | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9032 | Exposed Resources | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9035 | Exposed Functionality | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-798 |
CWE | 2.11 | 798 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-798. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9142 | Maturity: Preliminary |
Description Summary
Extended Description
Software that depends on hard-coded pieces of information within its own code reduces adaptability.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9132 | Reduced Adaptability | Default Graph (primary)9001 |
ParentOf | Is Issue | 9046 | Excessive Use of Hard-Coded Literals in Initialization | Quality Issues Organized by Practices (primary)9002 |
Incorrect Type Conversion or Cast |
Quality Issue ID: 704 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-704 |
CWE | 2.11 | 704 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-704. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Inheritance and Polymorphism |
Practice ID: 9157 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of inheritance and polymorphism results in unexpected behaviors.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9088 | Reuse | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
ParentOf | Is Issue | 9013 | Child Class Element without Virtual Destructor unlike its Parent Class Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9060 | Multiple Inheritance from Concrete Classes | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9087 | Parent Class Element with References to Child Class Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9123 | Class with an Excessive Inheritance Level | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9147 | Parent Class Element without Virtual Destructor Method Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9165 | Class with Excessive Number of Child Classes | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9166 | Class Element with Virtual Method Element without Virtual Destructor | Quality Issues Organized by Practices (primary)9002 |
Initialization Practices |
Practice ID: 9170 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring weak initialization practices incurs the risk of logic errors within the program, possibly leading to a security problem.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9058 | Security Vulnerabilities | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9146 | Math Error | Default Graph (primary)9001 |
ParentOf | Is Issue | 456 | Storable and Member Data Element Missing Initialization | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Initialization with Hard-Coded Network Resource Configuration Data |
Quality Issue ID: 9042 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the storable data element or member data element is initialized by the Write action with the hard-coded value corresponding to network resource identifications.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9068 | Embedded Network Configuration | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-18 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-18. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer |
Quality Issue ID: 9052 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable and method control elements from the higher horizontal layer directly calls the named callable or method control element from the lower horizontal layer, while the lower layer is not the next lower layer to the upper layer, as defined in the model of the architectural layers; this excludes the vertical utility layers that can be referenced from any horizontal layers.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9124 | Layered Architectures | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-12 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-12. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Invokable Control Element with Excessive File or Data Access Operations |
Quality Issue ID: 9160 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable and method control elements has too many control elements involving a data manager or a file resource, based on its number of such control elements, which exceeds the default threshold value of 7.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9036 | Unrestricted Data Operations | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-14 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-14. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Invokable Control Element with Signature Containing an Excessive Number of Parameters |
Quality Issue ID: 9093 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element has parameters in its signature which is greater than the default threshold value of 7.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9137 | Unrestricted Parameters | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-13 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-13. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Invokable Control Element with Variadic Parameter Element |
Quality Issue ID: 9062 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element has a variable number of parameters, due to the variadic parameter in its signature.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-8 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-8. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Practice ID: 9083 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of iteration control incurs the risk of unexpected consumption of resources, such as CPU cycles or memory, possibly leading to a crash or program exit due to exhaustion of resources.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 606 | Unchecked Input for Loop Condition | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 835 | Loop with Unreachable Exit Condition ('Infinite Loop') | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9061 | Recursion | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Layered Architectures |
Practice ID: 9124 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of layered architectures (such as strict partitioning and strict call hierarchy) decreases comprehensibility as well as simplicity to evolve the code.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
ParentOf | Is Issue | 9007 | Architecture with Number of Horizontal Layers Outside of Expected Range | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9052 | Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9184 | Use of Same Invokable Control Element in Multiple Architectural Layers | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9178 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring inconsistent locking discipline incurs the risk of deadlock.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
ParentOf | Is Issue | 667 | Shared Resource Improper Locking | Quality Issues Organized by Practices (primary)9002 |
Loop with Unreachable Exit Condition ('Infinite Loop') |
Quality Issue ID: 835 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9083 | Iteration Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-835 |
CWE | 2.11 | 835 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-835. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Memory Location Access After End of Buffer |
Quality Issue ID: 788 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9144 | Resource Monitoring | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-788 |
CWE | 2.11 | 788 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-788. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Practice ID: 9078 | Maturity: Preliminary |
Description Summary
Extended Description
When software does not properly manage memory, it can consume more memory than is necessary or incur the risk of corruption of relevant memory - and perhaps instructions - possibly leading to a crash, the risk of data integrity loss, and the risk of unauthorized access to sensitive data.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9022 | Memory Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 120 | Buffer Copy without Checking Size of Input | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 789 | Uncontrolled Memory Allocation | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Method Containing Access of a Member Element from Another Class |
Quality Issue ID: 9181 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the method control element from a class element accesses the member element from another class element.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9104 | Data Encapsulation | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-16 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-16. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Missing Release of Resource after Effective Lifetime |
Quality Issue ID: 772 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9080 | Resource Lifecycle | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Pr Practice | 9094 | Resource Bounds | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9031 | Denial of Service | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-772 |
ASCSM | 1 | ASCSM-CWE-772 |
CWE | 2.11 | 772 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-772. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-772. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Missing Serialization Control Element |
Quality Issue ID: 9102 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the serializable storable element has no serialization control element in its list of control elements. In case of technologies with class and interface elements, this means situations where the serializable storable element is a class that implements a serializable interface element but does not implement a serialization method element as part of its list composed of method elements. The serializable nature of the element is technology dependent. As examples, serializable nature comes from a serializable SerializableAttribute attribute in .NET and the inheritance from the java.io.Serializable interface in Java.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-2 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-2. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Practice ID: 9016 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of modularity causes excessive propagation of modification impacts.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9141 | Excessive Propagation of Modification Impacts | Default Graph (primary)9001 |
ParentOf | Is Issue | 9018 | Modules with Circular Dependencies | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9024 | Callable and Method Control Element Number of Outward Calls | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9151 | Source Code File with Excessive Number of Lines of Code | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Modules with Circular Dependencies |
Quality Issue ID: 9018 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the module has references that cycle back to itself via the module callable or data relations cycle. As an example, with Java, this pattern means cycles between packages.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9016 | Modular Development | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9064 | Modularity | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9172 | State Protection | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9082 | Livelock | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9141 | Excessive Propagation of Modification Impacts | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-7 |
ASCRM | 1 | ASCRM-RLB-13 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-7. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-13. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Multiple Inheritance from Concrete Classes |
Quality Issue ID: 9060 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the number of inheritance of concrete classes of the class element is considered as too large, based on its number of inheritance of concrete classes which exceeds the default threshold value of 1.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-2 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-2. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Name or Reference Resolution Improper Input Neutralization |
Quality Issue ID: 99 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9127 | Resource Identification Control | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-99 |
CWE | 2.11 | 99 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-99. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Named Callable and Method Control Element in Multi-Thread Context with non-Final Static Storable or Member Element |
Quality Issue ID: 9070 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9172 | State Protection | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9082 | Livelock | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-11 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-11. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Non-SQL Named Callable and Method Control Element with Excessive Number of Data Resource Access |
Quality Issue ID: 9122 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9167 | Stored Procedures & Functions | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-10 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-10. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Numeric Types Incorrect Conversion |
Quality Issue ID: 681 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9085 | Numerical Conversion | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9058 | Security Vulnerabilities | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9146 | Math Error | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-681 |
CWE | 2.11 | 681 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-681. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9085 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring weak numerical conversion practices incurs the risk of using the wrong number and generating incorrect results, possibly introducing new vulnerability when related to resource allocation and security decisions.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9058 | Security Vulnerabilities | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9146 | Math Error | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 681 | Numeric Types Incorrect Conversion | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9006 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of OS command control incurs the risk of unauthorized command execution, possibly used to disable the software, or possibly leading to unauthorized read and modify data access.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9030 | Unauthorized Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9030 | Unauthorized Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 78 | OS Command Injection Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
OS Command Injection Improper Input Neutralization |
Quality Issue ID: 78 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9006 | OS Command Execution | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9030 | Unauthorized Code Execution | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-78 |
CWE | 2.11 | 78 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-78. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Output Formatting Control |
Practice ID: 9129 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of formatting control incurs the risk of execution of arbitrary code, excessive memory or disk consumption, or the risk of information disclosure, which can severely simplify exploitation of the software.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9058 | Security Vulnerabilities | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9189 | Information Disclosure | Default Graph (primary)9001 |
ParentOf | Is Issue | 134 | Format String Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9097 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring weak output generation practices incurs the risk of arbitrary code execution, the risk of sensitive data being compromised, and many other nefarious consequences.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9017 | Arbitrary Code Execution | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 79 | Cross-site Scripting Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
Parent Class Element with References to Child Class Element |
Quality Issue ID: 9087 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-14 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-14. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Parent Class Element without Virtual Destructor Method Element |
Quality Issue ID: 9147 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-16 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-16. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Path Traversal Improper Input Neutralization |
Quality Issue ID: 22 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9183 | File Path Control | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9054 | Data Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-22 |
CWE | 2.11 | 22 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-22. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Persistent Storable Data Element without Associated Comparison Control Element |
Quality Issue ID: 9193 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the persistent storable element has no dedicated control element aiming at handling comparison action elements from the list. In case of technologies with class elements, this means situations where the persistent storable element is a class that is made persistent while it does not implement method elements from the required comparison control element list is now composed of method elements. As an example, with Java, a required comparison control element list is {'hashCode()','equals()'} method elements.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-4 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-4. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Practice ID: 9061 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of recursion incurs the risk of exceeding resource and capacity limits.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9083 | Iteration Control | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 674 | Uncontrolled Recursion | Quality Issues Organized by Practices (primary)9002 |
Remote System Call Blocking |
Practice ID: 9026 | Maturity: Preliminary |
Description Summary
Extended Description
Software featuring blocking calls to remote systems incurs the risk of its own failure when the remote systems fails to process the call correctly.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
ParentOf | Is Issue | 9173 | Synchronous Call Time-Out Absence | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9094 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of resource bounds or fails to monitor resources incurs the risk of exceeding resource and capacity limits.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 772 | Missing Release of Resource after Effective Lifetime | Quality Issues Organized by Practices (primary)9002 |
Resource Identification Control |
Practice ID: 9127 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of resource identification control incurs the risk of unauthorized access to or modification of sensitive data and system resources, including configuration files and files containing sensitive information.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9037 | Resource Management | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 99 | Name or Reference Resolution Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9080 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of resource lifecycle incurs the risk of preventing all other processes from accessing the same type of resource.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9037 | Resource Management | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 672 | Expired or Released Resource Usage | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 772 | Missing Release of Resource after Effective Lifetime | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9037 | Maturity: Preliminary |
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ParentOf | Pr Practice | 9080 | Resource Lifecycle | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9096 | Cache Maintenance | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9127 | Resource Identification Control | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9144 | Resource Monitoring | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9144 | Maturity: Preliminary |
Description Summary
Extended Description
Software that is unaware of resource bounds or fails to monitor resources incurs the risk of exceeding resource and capacity limits.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9037 | Resource Management | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
ParentOf | Is Issue | 788 | Memory Location Access After End of Buffer | Quality Issues Organized by Practices (primary)9002 |
Practice ID: 9088 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of reuse requires more maintenance effort in order to propagate changes to all instances of duplicated code.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9055 | Reusability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
ParentOf | Is Issue | 9011 | Use of Redundant Code | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9079 | Unreachable Invokable Control Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Pr Practice | 9157 | Inheritance and Polymorphism | Quality Issues Organized by Practices (primary)9002 |
MemberOf | Vi View | 9002 | Quality Issues Organized by Practices | Quality Issues Organized by Practices (primary)9002 |
Runtime Resource Management Control Element in a Component Built to Run on Application Servers |
Quality Issue ID: 9100 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-5 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-5. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Serializable Data Element Containing non-Serializable Item Elements |
Quality Issue ID: 9110 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the serializable storable element is composed of the non-serializable item element. In case of technologies with class and interface elements, this means situations where the serializable storage element is a class that is serializable but owns a non-Serializable member element. The serializable nature of the element is technology dependent. As examples, serializable nature comes from a serializable SerializableAttribute attribute in .NET and the inheritance from the java.io.Serializable interface in Java.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-3 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-3. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Shared Resource Improper Locking |
Quality Issue ID: 667 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9178 | Locking | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-667 |
CWE | 2.11 | 667 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-667. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Singleton Class Instance Creation without Proper Lock Element Management |
Quality Issue ID: 9192 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9172 | State Protection | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9082 | Livelock | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-12 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-12. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Source Code File with Excessive Number of Lines of Code |
Quality Issue ID: 9151 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the file has too many lines of code, based on its number of lines of code which exceeds the default threshold value of 1000.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9016 | Modular Development | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9141 | Excessive Propagation of Modification Impacts | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-8 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-8. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
SQL Command Execution |
Practice ID: 9003 | Maturity: Preliminary |
Description Summary
Extended Description
Software unaware of SQL command control incurs the risk of unauthorized read, modify, and delete access to sensitive data.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
ParentOf | Is Issue | 89 | SQL Injection Improper Input Neutralization | Quality Issues Organized by Practices (primary)9002 |
SQL Injection Improper Input Neutralization |
Quality Issue ID: 89 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9003 | SQL Command Execution | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-89 |
CWE | 2.11 | 89 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-89. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Practice ID: 9172 | Maturity: Preliminary |
Description Summary
Extended Description
Software deployed in multi-thread environments that does not protect their state can experience deadlock or livelock.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9028 | Deadlock | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9082 | Livelock | Default Graph (primary)9001 |
ParentOf | Is Issue | 9018 | Modules with Circular Dependencies | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9070 | Named Callable and Method Control Element in Multi-Thread Context with non-Final Static Storable or Member Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9192 | Singleton Class Instance Creation without Proper Lock Element Management | Quality Issues Organized by Practices (primary)9002 |
Static Member Data Element outside of a Singleton Class Element |
Quality Issue ID: 9004 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-3 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-3. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Storable and Member Data Element Missing Initialization |
Quality Issue ID: 456 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9170 | Initialization Practices | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9058 | Security Vulnerabilities | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-456 |
ASCSM | 1 | ASCSM-CWE-456 |
CWE | 2.11 | 456 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-456. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-456. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Storable or Member Data Element containing Pointer Item Element without Proper Copy Control Element |
Quality Issue ID: 9194 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-6 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-6. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Stored Procedures & Functions |
Practice ID: 9167 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not leverage database capabilities to efficiently run data processing (such as stored procedures and functions) requires excessive computational resources.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
ParentOf | Is Issue | 9077 | Excessive Number of Data Accesses using Inefficient Procedures | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9122 | Non-SQL Named Callable and Method Control Element with Excessive Number of Data Resource Access | Quality Issues Organized by Practices (primary)9002 |
Structured Programming |
Practice ID: 9121 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not follow the principles of structured programming degrades comprehensibility.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
ParentOf | Is Issue | 9134 | Unconditional Control Flow Transfer outside of Switch Block | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9185 | Excessive Cyclomatic Complexity Within an Invokable Control Element | Quality Issues Organized by Practices (primary)9002 |
ParentOf | Is Issue | 9220 | Excessive Use of Unconditional Branching | Quality Issues Organized by Practices (primary)9002 |
Synchronous Call Time-Out Absence |
Quality Issue ID: 9173 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9026 | Remote System Call Blocking | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-RLB-19 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-RLB-19. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Unchecked Input for Loop Condition |
Quality Issue ID: 606 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9083 | Iteration Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-606 |
CWE | 2.11 | 606 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-606. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Unchecked Return Parameter Value of Invokable Control Element with Read, Write, and Manage Access to Platform or Data Resource |
Quality Issue ID: 252 | Maturity: Preliminary |
Description Summary
Extended Description
For data resources managed using SQL, this pattern identifies situations where the invokable control element executes a CRUD SQL statement with the execute SQL statement action, yet the value of the return parameter from the action is not used by any check control element.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9010 | Execution Status Control | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9131 | Error/Exception Handling | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9057 | Erroneous Behaviors | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9154 | Poisoned Data Usage | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9168 | Unexpected Behaviors | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-252-data |
ASCRM | 1 | ASCRM-CWE-252-resource |
ASCSM | 1 | ASCSM-CWE-252 |
CWE | 2.11 | 252 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-252-resource. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-252-resource. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-252-data. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Unconditional Control Flow Transfer outside of Switch Block |
Quality Issue ID: 9134 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where control flow unconditional transfer of control is located outside the branching based on the value of a storable element.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9121 | Structured Programming | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-1 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-1. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Uncontrolled Memory Allocation |
Quality Issue ID: 789 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9078 | Memory Management | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9115 | Security | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9022 | Memory Corruption | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9038 | Loss of Data Integrity | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9143 | Failure | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9152 | Unauthorized Access to Sensitive Information | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCSM | 1 | ASCSM-CWE-789 |
CWE | 2.11 | 789 |
"Automated Source Code Security Measure
(ASCSM)". ASCSM-CWE-789. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCSM/1.0/>. |
Uncontrolled Recursion |
Quality Issue ID: 674 | Maturity: Preliminary |
Description Summary
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Pr Practice | 9061 | Recursion | Quality Issues Organized by Practices (primary)9002 |
ChildOf | Ch Characteristic | 9120 | Reliability | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9177 | Resource Exhaustion | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCRM | 1 | ASCRM-CWE-674 |
CWE | 2.11 | 674 |
"Automated Source Code Reliability Measure
(ASCRM)". ASCRM-CWE-674. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCRM/1.0/>. |
Unreachable Invokable Control Element |
Quality Issue ID: 9079 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element is unreferenced by any other code item in the application; the application determines the scope of the search for code items that could call the callable or method control element.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9088 | Reuse | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-20 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-20. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Unrestricted Data Operations |
Practice ID: 9036 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not cap the number of data operations degrades comprehensibility by requiring the understanding of too many external data structures.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
ParentOf | Is Issue | 9160 | Invokable Control Element with Excessive File or Data Access Operations | Quality Issues Organized by Practices (primary)9002 |
Unrestricted Parameters |
Practice ID: 9137 | Maturity: Preliminary |
Description Summary
Extended Description
Software that does not cap the number of parameters degrades comprehensibility.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
ParentOf | Is Issue | 9093 | Invokable Control Element with Signature Containing an Excessive Number of Parameters | Quality Issues Organized by Practices (primary)9002 |
Use of Data Element without Invoking Deconstructor Method |
Quality Issue ID: 9182 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the method control element references via the access action the storable or member data element without invoking its finalize ("destructor") method.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9169 | Performance | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9176 | Coding Practices | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9039 | Excessive Resource Expenditure | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCPEM | 1 | ASCPEM-PRF-15 |
"Automated Source Code Performance Efficiency
Measure (ASCPEM)". ASCPEM-PRF-15. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCPEM/1.0>. |
Use of Redundant Code |
Quality Issue ID: 9011 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the named callable control element or method control element contains too many identical computational objects, based on the number of identical computational objects with the named callable or method control element within the application; the application determines the scope of the search for the code item.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9088 | Reuse | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-19 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-19. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
Use of Same Invokable Control Element in Multiple Architectural Layers |
Quality Issue ID: 9184 | Maturity: Preliminary |
Description Summary
Extended Description
This pattern identifies situations where the callable or method control element is part of both layer 1 and layer 2 architectural layers.
Nature | Type | ID | Name | View(s) this relationship pertains to View |
---|---|---|---|---|
ChildOf | Ch Characteristic | 9034 | Maintainability | Default Graph (primary)9001 |
ChildOf | Pr Practice | 9124 | Layered Architectures | Quality Issues Organized by Practices (primary)9002 |
CanPrecede | Co Consequence | 9113 | Excessive Modification Effort | Default Graph (primary)9001 |
CanPrecede | Co Consequence | 9145 | Degraded Comprehension | Default Graph (primary)9001 |
Taxonomy | Version | Related ID |
---|---|---|
ASCMM | 1 | ASCMM-MNT-10 |
"Automated Source Code Maintainability Measure
(ASCMM)". ASCMM-MNT-10. v1.0. Object Management Group (OMG). 2016-01-01. <http://www.omg.org/spec/ASCMM/1.0>. |
This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2024, The MITRE Corporation. CQE, CWE, and the CQE logo are trademarks of The MITRE Corporation. Contact cqe@mitre.org for more information. |