If two threads of execution use a resource simultaneously,
there exists the possibility that resources may be used while invalid, in turn
making the state of execution undefined.
Time of Introduction
Architecture and Design
Implementation
Applicable Platforms
Languages
C
C++
Java
.NET
Common Consequences
Scope
Effect
Integrity
The main problem is that -- if a lock is overcome -- data could be
altered in a bad state.
Likelihood of Exploit
Medium
Demonstrative Examples
Example 1
(Bad Code)
C and C++
int foo = 0;
int storenum(int num) {
static int counter = 0;
counter++;
if (num > foo) foo = num;
return foo;
}
(Bad Code)
Java
public classRace {
static int foo = 0;
public static void main() {
new Threader().start();
foo = 1;
}
public static class Threader extends Thread {
public void run() {
System.out.println(foo);
}
}
}
Potential Mitigations
Phase
Description
Architecture and Design
Use locking functionality. This is the recommended solution. Implement
some form of locking mechanism around code which alters or reads
persistent data in a multi-threaded environment.
Architecture and Design
Create resource-locking sanity checks. If no inherent locking
mechanisms exist, use flags and signals to enforce your own blocking
scheme when resources are being used by other threads of
execution.
Description
