CWE-580

clone() Method Without super.clone()

Medium

Description

The product contains a clone() method that does not call super.clone() to obtain the new object.

Potential Impact

Integrity: Unexpected State

How to Fix

Implementation

Call super.clone() within your clone() method, when obtaining a new object.

Implementation

In some cases, you can eliminate the clone method altogether and use copy constructors.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-580 vulnerabilities in your codebase.

Get Security Assessment