CWE-463

Deletion of Data Structure Sentinel

Medium

Description

The accidental deletion of a data-structure sentinel can cause serious programming logic problems.

Potential Impact

How to Fix

Architecture and Design

Use an abstraction library to abstract away risky APIs. Not a complete solution.

Build and Compilation

Run or compile the software using features or extensions that automatically provide a protection mechanism that mitigates or eliminates buffer overflows. For example, certain compilers and extensions provide automatic buffer overflow detection mechanisms that are built into the compiled code. Examples include the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice.

Operation

Use OS-level preventative functionality. Not a complete solution.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-463 vulnerabilities in your codebase.

Get Security Assessment