CWEweakness
CWE-1127 Compilation with Insufficient Warnings or Errors
- Abstraction
- Class
- Structure
- Simple
- Status
- Incomplete
- Languages
- Compiled, Not Language-Specific
- CWE version
- 5.0
Description
The code is compiled without sufficient warnings enabled.
Common consequences
• Other: Reduce Maintainability — This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
• Other: Increase Analytical Complexity — This issue may prevent the detection of subtle
bugs or quality issues.
Potential mitigations
• [Build and Compilation] Compile the code with the best options
available to generate the most warnings that are
actionable.
Detection methods
• Manual Analysis: Inspect scripts and tools that invoke the
compiler. Ensure that the appropriate command line
switches and/or configuration are specified to report
warnings and errors.
Related
Child of · CWE (1)
- CWE-710 Improper Adherence to Coding Standards weakness