Kingdom: Code Quality

Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an attacker it provides an opportunity to stress the system in unexpected ways.

Code Correctness: Erroneous Zero Value

Java/JSP

Abstract

A variable is erroneously assigned a zero value.

Explanation

This field has been annotated with FortifyNonZero, which is used to indicate that zero is not a permitted value.

References

[1] Standards Mapping - Common Weakness Enumeration CWE ID 20

[2] Standards Mapping - Common Weakness Enumeration Top 25 2021 [4] CWE ID 020

[3] Standards Mapping - Common Weakness Enumeration Top 25 2022 [4] CWE ID 020

[4] Standards Mapping - Common Weakness Enumeration Top 25 2023 [6] CWE ID 020

[5] Standards Mapping - Common Weakness Enumeration Top 25 2024 [12] CWE ID 020

[6] Standards Mapping - OWASP Application Security Verification Standard 4.0 5.1.3 Input Validation Requirements (L1 L2 L3), 5.1.4 Input Validation Requirements (L1 L2 L3)

[7] Standards Mapping - SANS Top 25 2009 Insecure Interaction - CWE ID 020

desc.structural.java.erroneous_zero_value_field