CWE-683 Function Call With Incorrect Order of Arguments

The product calls a function, procedure, or routine, but the caller specifies the arguments in an incorrect order.

• Other: Quality Degradation, Varies by Context — This can lead to resultant weaknesses. The consequences will vary depending on which function is called and the context in which the function is used.

• [Implementation] Use the function, procedure, or routine as specified.

• Automated Analysis: Because this function call often produces incorrect behavior, it will usually be detected during testing or normal operation of the product. • Automated Analysis: Exercising all possible control paths will typically expose this weakness, except in rare cases when the incorrect function call accidentally produces the correct results, or if the provided argument type is very similar to the expected argument type.

• CVE-2006-7049: Application calls functions with arguments in the wrong order, allowing attacker to bypass intended access restrictions.