The product defines a signal handler that calls a non-reentrant function.
Require languages or libraries that provide reentrant functionality, or otherwise make it easier to avoid this weakness.
Design signal handlers to only set flags rather than perform complex functionality.
Ensure that non-reentrant functions are not found in signal handlers.
Use sanity checks to reduce the timing window for exploitation of race conditions. This is only a partial solution, since many attacks might fail, but other attacks still might work within the narrower window, even accidentally.
Our security experts can help you identify and remediate CWE-479 vulnerabilities in your codebase.
Get Security Assessment