Kingdom: Code Quality

Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an attacker it provides an opportunity to stress the system in unexpected ways.

Code Correctness: Erroneous Negative Value

Java/JSP

Abstract

A field is erroneously assigned a negative value.

Explanation

This field has been annotated with FortifyNonNegative, which is used to indicate that negative values are not permitted.

References

[1] Standards Mapping - Common Weakness Enumeration CWE ID 20

[2] Standards Mapping - Common Weakness Enumeration Top 25 2021 [4] CWE ID 020

[3] Standards Mapping - Common Weakness Enumeration Top 25 2022 [4] CWE ID 020

[4] Standards Mapping - Common Weakness Enumeration Top 25 2023 [6] CWE ID 020

[5] Standards Mapping - OWASP Application Security Verification Standard 4.0 5.1.3 Input Validation Requirements (L1 L2 L3), 5.1.4 Input Validation Requirements (L1 L2 L3)

[6] Standards Mapping - SANS Top 25 2009 Insecure Interaction - CWE ID 020

desc.structural.java.erroneous_negative_value_field