CWE-483

Incorrect Block Delimitation
AI Translation Available

The code does not explicitly delimit a block that is intended to contain 2 or more statements, creating a logic error.

Status
draft
Abstraction
base
Likelihood
low
C C++

In some languages, braces (or other delimiters) are optional for blocks. When the delimiter is omitted, it is possible to insert a logic error in which a statement is thought to be in a block but is not. In some cases, the logic error can have security implications.

Common Consequences

confidentiality integrity availability
Impacts
alter execution logic

Detection Methods

automated static analysis

Potential Mitigations

Phases:
implementation
Descriptions:
• Always use explicit block delimitation and use static-analysis technologies to enforce this practice.