OWASPASVS 5.0 requirement
ASVS-V15.4.3 Locks are used consistently to avoid threads getting stuck, whether by waiting on each other or retrying endlessly, and that locking logic…
- Standard
- OWASP ASVS 5.0
- Chapter
- V15 Secure Coding and Architecture
- Section
- V15.4 Safe Concurrency
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that locks are used consistently to avoid threads getting stuck, whether by waiting on each other or retrying endlessly, and that locking logic stays within the code responsible for managing the resource to ensure locks cannot be inadvertently or maliciously modified by external classes or code.