View source for Dead Code: Expression is Always False

{{Template:Vulnerability}}
{{Template:Fortify}}

[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]

Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''

[[ASDR_TOC_Vulnerabilities|Vulnerabilities Table of Contents]]

[[ASDR Table of Contents]]
__TOC__


==Description==

This expression will always evaluate to false.

This expression will always evaluate to false; the program could be rewritten in a simpler form. The nearby code may be present for debugging purposes, or it may not have been maintained along with the rest of the program. The expression may also be indicative of a bug earlier in the method.


==Risk Factors==

TBD


==Examples==
The following method never sets the variable secondCall after initializing it to false. (The variable firstCall is mistakenly used twice.) The result is that the expression firstCall && secondCall will always evaluate to false, so setUpDualCall() will never be invoked.

<pre>
	public void setUpCalls() {
	  boolean firstCall = false;
	  boolean secondCall = false;
	
	  if (fCall > 0) {
		setUpFCall();
		firstCall = true;
	  }
	  if (sCall > 0) {
		setUpSCall();
		firstCall = true;
	  }
	
	  if (firstCall && secondCall) {
		setUpDualCall();
	  }
	}
</pre>


==Related [[Attacks]]==
* [[Attack 1]]
* [[Attack 2]]


==Related [[Vulnerabilities]]==
* [[Vulnerability 1]]
* [[Vulnerabiltiy 2]]


==Related [[Controls]]==
* [[Control 1]]
* [[Control 2]]


==Related [[Technical Impacts]]==
* [[Technical Impact 1]]
* [[Technical Impact 2]]


==References==
TBD

[[Category:FIXME|add links

In addition, one should classify vulnerability based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Vulnerability]]</nowiki>

Availability Vulnerability

Authorization Vulnerability

Authentication Vulnerability

Concurrency Vulnerability

Configuration Vulnerability

Cryptographic Vulnerability

Encoding Vulnerability

Error Handling Vulnerability

Input Validation Vulnerability

Logging and Auditing Vulnerability

Session Management Vulnerability]]

__NOTOC__


[[Category:OWASP ASDR Project]]
[[Category:Code Quality Vulnerability]]
[[Category:Java]]
[[Category:Implementation]]
[[Category:Code Snippet]]