CWE-1099 标识符的命名约定不一致

Inconsistent Naming Conventions for Identifiers

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: unkown

基本描述

The product's code, documentation, or other artifacts do not
consistently use the same naming conventions for variables, callables, groups of
related callables, I/O capabilities, data types, file names, or similar types of
elements.

扩展描述

This issue makes it more difficult to understand and/or maintain the software due to inconsistencies, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 1078 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 1078 cwe_View_ID: 699 cwe_Ordinal: Primary

引用

• REF-963 Providing a Framework for Effective Software Quality Assessment

文章来源于互联网:scap中文网