베타 Shoulder는 베타 버전입니다 — 결과가 가끔 잘못될 수 있습니다. 여러분의 피드백이 다음에 무엇을 고칠지 결정합니다. 피드백 공유
🏁

Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition')

🛡️ 6 개의 규칙이 이를 탐지합니다

Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

This can have security implications when the expected synchronization is in security-critical code, such as recording whether a user is authenticated or modifying important state information that should not be influenced by an outsider.

보급률
보통
3개 언어 지원
영향
높음
4개의 높은 심각도 규칙
예방
문서화됨
6개의 수정 예시
2 예방
2 예방

이 취약점을 수정하는 방법

6개의 Shoulder 탐지 규칙을 기반으로 한 Race Condition 예방 전략.

Concurrent Slice Access HIGH

Protect concurrent slice access with mutex or use channels to collect results

+10 -7 go
  func collect(items []string) []string {
-     var results []string
-     for _, item := range items {
-         go func(i string) {
-             results = append(results, process(i))
-         }(item)
-     }
-     time.Sleep(time.Second)
+     resultsCh := make(chan string, len(items))
+     for _, item := range items {
+         go func(i string) {
+             resultsCh <- process(i)
+         }(item)
+     }
+     results := make([]string, 0, len(items))
+     for i := 0; i < len(items); i++ {
+         results = append(results, <-resultsCh)
+     }
      return results
  }
  
Direct Map Access on Thread-Safe Struct HIGH

Use thread-safe accessor methods or sync.RWMutex for concurrent map access

+1 -1 go
  func getNodeName(node *Node) string {
-     name, ok := node.Attributes["name"].(string)
+     name, ok := node.GetAttrString("name")
      if !ok {
          return ""
      }
      return name
  }
  
Potential Race Condition MEDIUM

Protect shared state with sync.Mutex, atomic operations, or sync.Map

+4 -4 go
- var counter int
- func increment() {
-     go func() {
-         counter++
+ var counter int64
+ func increment() {
+     go func() {
+         atomic.AddInt64(&counter, 1)
      }()
  }
  
Race Condition in Concurrent Operations HIGH

Use database transactions with row-level locking for atomic read-modify-write operations

+16 -3 javascript
  app.post('/withdraw', async (req, res) => {
-   const account = await Account.findOne({ where: { userId } });
-   if (account.balance >= amount) {
-     await account.update({ balance: account.balance - amount });
+   const transaction = await db.transaction();
+   try {
+     const account = await Account.findOne({
+       where: { userId },
+       lock: transaction.LOCK.UPDATE,
+       transaction
+     });
+     if (account.balance < amount) {
+       await transaction.rollback();
+       return res.status(400).json({ error: 'Insufficient funds' });
+     }
+     await account.update({ balance: account.balance - amount }, { transaction });
+     await transaction.commit();
+   } catch (e) {
+     await transaction.rollback();
+     throw e;
    }
  });
  
Potential Race Condition MEDIUM

Use locks for shared data and atomic operations for file access

+6 -4 python
  import threading
  
  counter = 0
- 
- def increment():
-     global counter
-     counter += 1
+ lock = threading.Lock()
+ 
+ def increment():
+     global counter
+     with lock:
+         counter += 1
  
  threads = [threading.Thread(target=increment) for _ in range(100)]
  

핵심 실천 사항

  • Use data races, lost data, or panics
  • Use race conditions
  • Use of sync
3 탐지
3 탐지

코드에서 취약점 찾기

Shoulder를 사용하여 코드에서 Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition') 패턴을 스캔하세요. 6 규칙.

터미널
# Scan with Shoulder CLI
npx @shoulderdev/cli trust --cwe=362

# Or scan entire project
npx @shoulderdev/cli trust .

탐지 규칙 (6)

4 경고 신호
4 경고 신호

코드 리뷰에서 주의할 점

이 패턴은 잠재적인 Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition') 취약점을 나타냅니다. 코드 리뷰와 보안 감사 중에 찾아보세요.

🟠
Concurrent slice access without synchronization causes data races. append() is NOT atomic - multiple goroutines appendin go-concurrent-slice-access
🟠
Direct access to map fields can cause race conditions in concurrent code. Maps in Go are not thread-safe, and concurrent go-direct-map-access
🟠
Improper WaitGroup usage can cause: - Race conditions (Add inside goroutine) - Panics (negative counter from Done miscou go-waitgroup-misuse
🟠
Race condition at ... - check and act are not atomic javascript-race-conditions
🟠
time-of-check to time-of-use (TOCTOU) vulnerabilities where the state can change between checking a javascript-race-conditions
🟡
Shared data accessed without proper synchronization go-race-condition
🟡
potential race conditions in concurrent Python code python-race-condition
🔍

코드베이스를 스캔하세요: Concurrent Execution Using Shared Resource with Improper Synchronization ('Race Condition')

Shoulder CLI는 전체 코드베이스에서 취약한 패턴을 찾아냅니다.