CS.CONSTCOND.DO

The condition of a 'do' statement is always true or always false.

Example 1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
  class Increaser {
      void Increase() {
          int x = 3;
          do {
              x++;
          } while (3 < 10);  // defect - the condition is constant
          do {
              x--;
          } while(false);    // Ok - typical usage of 'do' constructs when a user to organize a code block
         do {
             return;
         } while(true);     // Ok - typical usage of 'do' constructs when a user to organize an infinite loop
     }
 }

External guidance

• CWE-570: Expression is Always False

Security training

Application security training materials provided by Secure Code Warrior.

• Business Logic Training Video - Test your skills with a training example