System resources, CPU and memory, can be quickly consumed. This can
lead to poor system performance or system crash.
Demonstrative Examples
Example 1
This data prints the contents of a specified file requested by a
user.
(Bad Code)
Example
Language: PHP
function printFile($username,$filename){
//read file into string
$file = file_get_contents($filename);
if ($file &&
isOwnerOf($username,$filename)){
echo $file;
return true;
}
else{
echo 'You are not authorized to view this file';
}
return false;
}
This code first reads a specified file into memory, then prints the
file if the user is authorized to see its contents. The read of the file
into memory may be resource intensive and is unnecessary if the user is
not allowed to see the file anyway.
More information is available — Please select a different filter.
Page Last Updated:
May 05, 2017
Use of the Common Weakness Enumeration and the associated references from this website are subject to the
Terms of Use. For more information, please email
cwe@mitre.org.
Description
