CWE-572

Call to Thread run() instead of start()

Medium

Description

The product calls a thread's run() method instead of calling start(), which causes the code to run in the thread of the caller instead of the callee.

Potential Impact

Other: Quality Degradation

How to Fix

Implementation

Use the start() method instead of the run() method.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-572 vulnerabilities in your codebase.

Get Security Assessment