CS.CONSTCOND.WHILE

The condition of a 'while' statement is always true or always false.

Example 1

1
2
3
4
5
6
7
8
9
10
  class Something {
      void DoSomething() {
          while (false) {    // defect
              /* ... */
          }
          while (true) {     // Ok - typical usage of 'do' constructs when a user to organize an infinite loop
              /* ... */
          }
      }
 }

External guidance

• CWE-570: Expression is Always False

Security training

Application security training materials provided by Secure Code Warrior.

• Business Logic Training Video - Test your skills with a training example