CWE-664: Improper Control of a Resource Through its Lifetime
Improper Control of a Resource Through its Lifetime
Weakness ID: 664 (Weakness Class)
Status: Draft
Description
Description Summary
The software does not maintain or incorrectly maintains control
over a resource throughout its lifetime of creation, use, and
release.
Extended Description
Resources often have explicit instructions on how to be created, used and
destroyed. When software fails to follow these instructions, it can lead to
unexpected behaviors and potentially exploitable states.
Even without explicit instructions, various principles are expected to be
adhered to, such as "Do not use an object until after its creation is
complete," or "do not use an object after it has been slated for
destruction."
Time of Introduction
Implementation
Potential Mitigations
Phase
Description
Use Static analysis tools to check for unreleased resources.
More work is needed on this node and its children. There are
perspective/layering issues; for example, one breakdown is based on
lifecycle phase (CWE-404, CWE-665), while other children are independent of
lifecycle, such as CWE-400. Others do not specify as many bases or variants,
such as CWE-704, which primarily covers numbers at this stage.
Content History
Modifications
Modification Date
Modifier
Organization
Source
2008-07-01
Eric Dalci
Cigital
External
updated Potential Mitigations,
Time of Introduction
2008-09-08
CWE Content Team
MITRE
Internal
updated Description, Maintenance Notes, Relationships,
Type
Description
