CWE
Home > CWE List > CWE-606 Individual Dictionary Definition (Draft 9)   View the CWE List

CWE-606 Individual Dictionary Definition (Draft 9)

Unchecked Input for Loop Condition
Weakness ID
Status: Draft

606 (Weakness Variant)

Description

Summary

The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service because of excessive looping.

Demonstrative
Examples

void iterate(int n){
                            int i;
                            for (i = 0; i < n; i++){
                                foo();
                            }
                        }
                        void iterateFoo()
                        {
                            unsigned num;
                            scanf("%u",&num);
                            iterate(num);
                        }

Relationships
NatureTypeIDName
ChildOfWeakness ClassWeakness ClassWeakness Class20Insufficient Input Validation
ChildOfWeakness ClassWeakness ClassWeakness Class398Indicator of Poor Code Quality
Source Taxonomies

Anonymous Tool Vendor (under NDA) -

Page Last Updated: April 22, 2008