Umbra Wiki weakness weakness/CWE-1064
Back to wiki

CWE-1064 — Invokable Control Element with Signature Containing an Excessive Number of Parameters

provenance: imported · CWE: CWE-1064

CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters

MITRE CWE weakness

Kind Weakness
Abstraction Base
Status Incomplete
Likelihood of exploit

Description

The product contains a function, subroutine, or method whose signature has an unnecessarily large number of parameters/arguments.

While the interpretation of "large number of parameters" may vary for each product or developer, CISQ recommends a default maximum of 7 parameters/arguments.

Common consequences

  • Other: Reduce Maintainability, Increase Analytical Complexity

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/1064.html
  • CWE list: https://cwe.mitre.org/data/index.html