CWE
Home > CWE List > CWE- Individual Dictionary Definition (1.1)  
Search by ID:

CWE-666: Operation on Resource in Wrong Phase of Lifetime

Individual Definition in a New Window
Operation on Resource in Wrong Phase of Lifetime
Status: Draft
Weakness ID: 666 (Weakness Base)
Description
Summary

The software performs an operation on a resource at the wrong phase of the resource's lifecycle, which can lead to unexpected behaviors.

Extended Description

When a developer wants to initialize, use or release a resource, it is important to follow the specifications outlined for how to operate on that resource and to ensure that the resource is in the expected state. In this case, the software wants to perform a normally valid operation, initialization, use or release, on a resource when it is in the incorrect phase of its lifetime.

Potential Mitigations

Follow the resource's lifecycle from creation to release.

Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfWeakness ClassWeakness ClassWeakness Class664Insufficient Control of a Resource Through its Lifetime
Research Concepts (primary)1000
ParentOfWeakness VariantWeakness VariantWeakness Variant415Double Free
Research Concepts (primary)1000
ParentOfWeakness VariantWeakness VariantWeakness Variant593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
Research Concepts (primary)1000
ParentOfWeakness BaseWeakness BaseWeakness Base605Multiple Binds to the Same Port
Research Concepts1000
ParentOfWeakness BaseWeakness BaseWeakness Base672Use of a Resource after Expiration or Release
Research Concepts (primary)1000
Time of Introduction
* Implementation
* Operation
Content History
Modifications
Eric Dalci. Cigital. 2008-07-01. (External)
updated Potential_Mitigations, Time_of_Introduction
CWE Content Team. MITRE. 2008-09-08. (Internal)
updated Description
Page Last Updated: November 24, 2008