The code does not have a default case in an expression with multiple conditions, such as a switch statement.
Ensure that there are no cases unaccounted for when adjusting program flow or values based on the value of a given variable. In the case of switch style statements, the very simple act of creating a default case can, if done correctly, mitigate this situation. Often however, the default case is used simply to represent an assumed option, as opposed to working as a check for invalid input. This is poor practice and in some cases is as bad as omitting a default case entirely.
Our security experts can help you identify and remediate CWE-478 vulnerabilities in your codebase.
Get Security Assessment