CWEweakness

CWE-1127 Compilation with Insufficient Warnings or Errors

Official page ↗
Abstraction
Class
Structure
Simple
Status
Incomplete
Languages
Compiled, Not Language-Specific
CWE version
5.0

Description

The code is compiled without sufficient warnings enabled.

Common consequences

• Other: Reduce Maintainability — This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities. • Other: Increase Analytical Complexity — This issue may prevent the detection of subtle bugs or quality issues.

Potential mitigations

• [Build and Compilation] Compile the code with the best options available to generate the most warnings that are actionable.

Detection methods

• Manual Analysis: Inspect scripts and tools that invoke the compiler. Ensure that the appropriate command line switches and/or configuration are specified to report warnings and errors.

Related

Child of · CWE (1)

  • CWE-710 Improper Adherence to Coding Standards weakness