CS.CONSTCOND.IF

The condition of an 'if' statement is always true or always false.

Example 1

1
2
3
4
5
6
7
8
  class Thing {
      void DoAction() {
          if (sizeof(char) < 2)   // defect - the condition is constant
          {
              /* ... */
          }
      }
  }

External guidance

• CWE-570: Expression is Always False

Security training

Application security training materials provided by Secure Code Warrior.

• Business Logic Training VideoTest your skills with a training example