CWE-1080: Source Code File with Excessive Number of Lines of Code

BaseIncomplete

A source code file has too many lines of code.

View on MITRE
Back to CWE Lookup

Extended Description

This issue makes it more difficult to understand and/or maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities. While the interpretation of "too many lines of code" may vary for each product or developer, CISQ recommends a default threshold value of 1000.

Technical Details

Structure
Simple

Applicable To

Languages
Platforms

Frequently Asked Questions

What is CWE-1080: Source Code File with Excessive Number of Lines of Code?+

CWE-1080: Source Code File with Excessive Number of Lines of Code is a Common Weakness Enumeration (CWE) entry maintained by MITRE. A source code file has too many lines of code. This issue makes it more difficult to understand and/or maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities. While the interpretation of "too many lines of code" may vary for each product or developer, CISQ recommends a default threshold value of 1000.

What are the security consequences of Source Code File with Excessive Number of Lines of Code?+

If exploited, CWE-1080 (Source Code File with Excessive Number of Lines of Code) it can compromise Other, leading to outcomes such as Reduce Maintainability.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-1080 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.

Learn More