Secure Coding mailing list archives
Bugs and flaws
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Date: Sat, 04 Feb 2006 16:59:56 +1300
Al Eridani <al.eridani at gmail.com> wrote:
If the design says "For each fund that the user owns, do X" and my code does X for all the funds but it skips the most recently acquired fund, I see it as a "manufacturing" error. On the other hand, if a user sells all of her funds and the design does not properly contemplate the situation where no funds are owned and therefore the software misbehaves, I see it as a "design" error.
Maybe I'm confused, but... If the design in your second case is still the same one -- "For each fund that the user owns, do X" -- then this second example, like your first, is NOT a design error but an implementation (or "manufacturing" if you prefer) error. (Both are (probably) due to some or other form of improper bounds checking, and probably due to na?ve use of zero- based counters controlling a loop... 8-) ) The design "For each fund that the user owns, do X" clearly (well, to me -- am I odd in this?) says that NOTHING be done if the number of funds is zero, hence the second result is an implemention error. Regards, Nick FitzGerald
Current thread:
- Bugs and flaws, (continued)
- Bugs and flaws Brian Chess (Feb 02)
- Bugs and flaws Gary McGraw (Feb 02)
- Bugs and flaws Jeff Williams (Feb 02)
- Bugs and flaws Gary McGraw (Feb 03)
- Bugs and flaws James Stibbards (Feb 03)
- Bugs and flaws Crispin Cowan (Feb 03)
- Bugs and flaws Dana Epp (Feb 03)
- Bugs and flaws Crispin Cowan (Feb 07)
- Bugs and flaws Nick FitzGerald (Feb 03)
- Bugs and flaws Brian Chess (Feb 03)
- Bugs and flaws Nick FitzGerald (Feb 03)
- Bugs and flaws Evans, Arian (Feb 06)
- Bugs and flaws Evans, Arian (Feb 06)
- Where to read about construction quality software ljknews (Feb 06)
- Bugs and flaws Gary McGraw (Feb 06)
- Bugs and flaws Jeff Williams (Feb 07)
- Bugs and flaws Julie Ryan (Feb 07)
- Bugs and flaws Gunnar Peterson (Feb 07)
- Bugs and flaws Jeff Williams (Feb 07)
- Bugs and flaws Gary McGraw (Feb 06)
