CWE-543
Use of Singleton Pattern Without Synchronization in a Multithreaded Context
AI Translation Available
The product uses the singleton pattern when creating a resource within a multithreaded environment.
Status
incomplete
Abstraction
variant
Affected Platforms
C++
Java
Extended Description
AI Translation
The use of a singleton pattern may not be thread-safe.
Technical Details
AI Translation
Common Consequences
other
integrity
Impacts
other
modify application data
Detection Methods
automated static analysis
Potential Mitigations
Phases:
architecture and design
implementation
Descriptions:
•
Use the Thread-Specific Storage Pattern. See References.
•
Avoid using the double-checked locking pattern in language versions that cannot guarantee thread safety. This pattern may be used to avoid the overhead of a synchronized call, but in certain versions of Java (for example), this has been shown to be unsafe because it still introduces a race condition (CWE-209).
•
Do not use member fields to store information in the Servlet. In multithreading environments, storing user data in Servlet member fields introduces a data access race condition.