...
Deadlock prevents multiple threads from progressing, halting program execution. A denial-of-service attack is possible if the attacker can create the conditions for deadlock.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
CON53-CPP | Low | Probable | Medium | P4 | L3 |
Automated Detection
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| CONCURRENCY.LOCK.ORDER | Conflicting lock order | ||||||
| Coverity | 6.5 | DEADLOCK | Fully implemented | ||||||
| Parasoft C/C++test |
|
|
|
CERT_CPP- |
CON53- |
a | Do not acquire locks in different order |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
| CERT Oracle Secure Coding Standard for Java | LCK07-J. Avoid deadlock by requesting and releasing locks in the same order |
| MITRE CWE | CWE-764, Multiple Locks of a Critical Resource |
Bibliography
| [ISO/IEC 14882-2014] | Subclause 30.4, "Mutual Exclusion" |
...