CWE-687 (使用不正确指定参数值的函数调用) — Vulnerability Class 2

CWE-687 represents a logic error where a function is invoked with an argument containing an incorrect value, rather than a syntactically invalid one. This weakness typically arises when developers assume default behaviors or fail to validate input parameters before passing them to critical routines. Exploitation often occurs when an attacker manipulates these arguments to bypass security checks, trigger buffer overflows, or cause unintended state changes within the application. For instance, passing a null pointer or an out-of-bounds index can lead to crashes or privilege escalation. To mitigate this risk, developers must implement rigorous input validation and defensive programming practices. Ensuring that all function arguments are explicitly checked against expected ranges and types before execution prevents the propagation of erroneous data, thereby maintaining application integrity and preventing downstream vulnerabilities.