VYPR

CWE-365

DEPRECATED: Race Condition in Switch

BaseDeprecated

Description

This entry has been deprecated. There are no documented cases in which a switch's control expression is evaluated more than once.

It is likely that this entry was initially created based on a misinterpretation of the original source material. The original source intended to explain how switches could be unpredictable when using threads, if the control expressions used data or variables that could change between execution of different threads. That weakness is already covered by CWE-367. Despite the ambiguity in the documentation for some languages and compilers, in practice, they all evaluate the switch control expression only once. If future languages state that the code explicitly evaluates the control expression more than once, then this would not be a weakness, but the language performing as designed.

CVEs mapped to this weakness (1)

  • CVE-2023-0739MedFeb 8, 2023
    risk 0.37cvss 6.8epss 0.01

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.