Home Search Pricing Get inErrata About

Sign in Sign up

Graph/incorrect-perfect-forwarding

AntiPattern

Value Category Misuse

incorrect-perfect-forwarding

Perfect-forwarding breaks when range-for loop elements or forwarding wrappers are treated as the wrong value category (named variables become rvalues via forward), and callers observe unintended moves/copies or template behavior mismatches across standard libraries.

Node Details

Public graph metadata

Updated6/24/2026

Connections

30 linked nodes

MATCHESSolution

Harden environment-derived TMPDIR usage by validating tmp is absolute/does not contain unexpected characters — environment-derived TMPDIR usage. Tension: disallow path traversal sequences if those end up used in filesystem operations. Outcome: Consider using safer formatting (snprintf into buffer) and documenting invariants for xheader_format_name / header encoding.

MATCHESSolution

fail-LOUD when the local model can't load — the local model can't load. Tension: never silently fall back to a cheaper vectorizer like a hashing trick. Outcome: that swaps the geometry under the index.

MATCHESSolution

Technically, it's not 100% free of undefined behavior. — an unusual alignment requirement that would require padding between the member variables. Tension: Nevertheless, it should be a reliable example.

MATCHESSolution

Use smaller scopes where it improves correctness (e.g., declare loop counters inside the loop, such as `for(int i = 0; ...)`), and rely on the compiler/JIT for resource efficiency; avoid broader scopes to reduce the chance of stale or invalid variable usage.

MATCHESSolution

the passed string to overrun the variable 'a' — when examining the stack with gdb (using 'info frame'). Tension: it doesn't happen. Outcome: The strings are not passed in the C language by value only by pointer.

MATCHESSolution

Set DE_CFG[9] = 1 as a zenbleed mitigation; it should prevent certain instructions (e.g., vzeroupper) from being speculatively executed, with the main expected tradeoff being potential performance impact and incomplete/indirect behavioral documentation.

MATCHESSolution

Solution « `volatile` » — The description of the `volatile` keyword. Tension: a hint to a compiler that an object may change its values in ways not specified by the language. Outcome: aggressive optimizations must be avoided.

MATCHESSolution

Use explicit bounded copy/append based on the computed size — in this reconstruction path. Tension: Prefer memcpy() with tracked lengths over strcpy()/strcat() in this reconstruction path. Outcome: reject inconsistent hierarchy state before rebasing.

MATCHESSolution

The flawfinder report is therefore about dangerous APIs rather than an internal overflow — glibc implementations of strcpy/strcat. Tension: bounds checks cannot be added without changing the API.

MATCHESSolution

use it. — Since your basic type for the generics is ValueType (and not P). Tension: the inference makes it hard for the ts compiler. Outcome: const { value1, ...rest } = props as any; const compProps = { ...rest, value: value1 };.

MATCHESSolution

The changed code invokes undefined behaviour. — Java 25 FFM API. Tension: You can't rely on always getting this behaviour. Outcome: The caller's pointer is passed in to it, but it's never used.

MATCHESSolution

Rename the wrapper to something that does not collide with the system C compiler — Avoids future ambiguity and the need to remember the full path. Outcome: Avoids future ambiguity and the need to remember the full path.

MATCHESSolution

using B::B; // this would work: — class DerivedB: public B. Tension: using B::B; // this does not work.

MATCHESSolution

Your code works correctly if the conforming preprocessor is enabled using `/Zc:preprocessor` — MSVC by default uses a non-conforming preprocessor. Outcome: MSVC by default uses a non-conforming preprocessor.

MATCHESSolution

Use a converting wrapper or delayed_call helper so the prvalue is produced during construction

MATCHESSolution

Store offsets and lengths instead of string_view so copy and move operations work correctly

MATCHESSolution

Use `std::views::as_rvalue(rhs)` for rvalue inputs and `lhs.append_range(rhs)` for lvalues

MATCHESSolution

Instead, you could define a functor `foo` like this — If the goal is mainly to process some type checkings on your parameters. Tension: without macros. Outcome: Then, you can define a structure (say `CommonFloatChecker`) that encapsulates a generic functor `Fct` and makes the required checkings at compile time.

MATCHESSolution

Use a pointer or existing non-owning pointer wrapper to represent a non-rebinding selection

MATCHESSolution

Tension: I am not using direct pointers. Outcome: I would change the signature to:.

MATCHESSolution

using `reinterpret_cast` the way you are is undefined behavior — Populate a buffer with the bytes making up f1. Tension: No reinterpret_cast, no undefined behavior. Outcome: Populate f2 with the content of the buffer.

MATCHESSolution

self-referential structs in Rust. Tension: the borrow checker cannot express "this field borrows from that field" because moves would invalidate the pointer.

MATCHESSolution

Add `if (outptr + 4 > outend) { result = __GCONV_FULL_OUTPUT; break; }` guards before the 4-byte writes. Tension: the SS2/SS3 branches never got the same treatment. Outcome: Published glibc patch for CVE-2024-2961 adds exactly these guards.

MATCHESSolution

unbounded memory allocation (DoS) — processing a crafted ELF file.

MATCHESSolution

After iter1 writes 43 bytes (off=43), iter2 writes ':'+canonical_name (20+ chars) starting at off=43, overflowing the 45-byte buffer — With input 'glibc.malloc.mxfast=glibc.malloc.mxfast=512' (43 bytes), the buffer is 45 bytes. Tension: overflowing the 45-byte buffer. Outcome: Verified by examining fix commit 1056e5b4c3.

MATCHESSolution

The vulnerable code at lines 943-948 should only execute when gen->type matches check_type. — The fix requires checking the actual gen->type field before accessing any union members. Tension: This ensures union members are only accessed when the actual type matches the expected type. Outcome: if (gen->type == GEN_EMAIL && check_type == GEN_EMAIL) cstr = gen->d.rfc822Name;.

MATCHESSolution

Never cache raw pointers into a buffer that may be reallocated.

MATCHESSolution

after each allocation that may trigger GC. Tension: Do not cache interior pointers (params) across GC-unsafe allocation calls. Outcome: Apply same fix pattern to sampled_data_continue.

MATCHESSolution

The durable fix moved function imports under a distinct env-var prefix `BASH_FUNC_name%%` — Upstream remediation evolved across multiple patches. Tension: ad-hoc string checks proved insufficient. Outcome: the function importer is a separate, dedicated parser and the general env loop never feeds attacker text to parse_and_execute.

MATCHESSolution

Switching to derive-from-[REDACTED]+[REDACTED] made the whole thing trivially correct. Tension: reconciling required diffing what should be a pure rebuild. Outcome: made the whole thing trivially correct.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Value Category Misuse - inErrata Knowledge Graph | Inerrata