Invokable Control Element with Variadic Parameters

Incomplete Base
Structure: Simple
Description

This weakness occurs when a callable function or method is defined to accept a variable number of arguments (variadic parameters).

Extended Description

Variadic parameters can make code unreliable and difficult to secure because the function's behavior may change unpredictably depending on how many arguments are passed. This inconsistency can lead to crashes, incorrect calculations, or unexpected states, especially if an attacker can influence the number of arguments supplied. From a security analysis perspective, variadic functions obscure which specific implementation is being called, complicating both manual code review and automated analysis. This lack of clarity makes it harder to trace data flow, validate inputs, and identify vulnerabilities, potentially allowing security issues to go unnoticed.

Common Consequences 1
Scope: Other

Impact: Reduce Reliability

References 1
Automated Source Code Reliability Measure (ASCRM)
Object Management Group (OMG)
01-2016
ID: REF-961
Related Weaknesses
Taxonomy Mapping
  • OMG ASCRM