Page tree
Skip to end of metadata
Go to start of metadata

Error rendering macro 'redirect'

Invalid URL: "CISQ - CWE - OWASP rules". Please provide a valid URL to redirect to.


This page presents the CISQ/OMG Quality Measurement Rules at unit-level for applications based on ABAP technology and SAP SQL supported by CAST AIP. ABAP and SAP SQL is an example of a common technology stack used in many applications. If necessary, CAST can help create overview of CISQ coverage for other combinations of technologies.

OMG CharacteristicsOMG Rule Id and NameLevelsAIP QR IdAIP QR NameDescription of CoverageSource Techno
MaintainabilityASCMM-MNT-01: Control Flow Transfer Control Element outside Switch BlockUnit7850Avoid raising an exception in a Web Dynpro Supply Function or in a Method called by a Supply FunctionThe AIP rule checks if the control flow is not broken in methods and functions implemented in Web Dynpro applications.ABAP / SAP SQL
MaintainabilityASCMM-MNT-01: Control Flow Transfer Control Element outside Switch BlockUnit7672Avoid using EXIT statement in IncludeUsing the EXIT statement to jump out a control block can be considered as transferring the control flow.ABAP / SAP SQL
MaintainabilityASCMM-MNT-01: Control Flow Transfer Control Element outside Switch BlockUnit7864BAPIs must not cause the Program to abort or terminateThe AIP rule checks if the control flow is not broken in methods implemented in BAPI components.ABAP / SAP SQL
MaintainabilityASCMM-MNT-01: Control Flow Transfer Control Element outside Switch BlockUnit7892Web Dynpro - Avoid changing the program flowThe AIP rule checks if the control flow in Web Dynpro applications is not broken and transferred to another transaction through the CALL TRANSACTION statement.ABAP / SAP SQL
MaintainabilityASCMM-MNT-03: Storable and Member Data Element Initialization with Hard-Coded LiteralsUnit7522Avoid using literals in assignments (hardcoded values)This AIP rule checks for variables initialized with non trivial literals and for variables that are compared to non trivial literals.ABAP / SAP SQL
MaintainabilityASCMM-MNT-05: Loop Value Update within the LoopUnit-  ABAP / SAP SQL
MaintainabilityASCMM-MNT-06: Commented Code Element Excessive VolumeUnit7126Avoid Artifacts with high Commented-out Code Lines/Code Lines ratioDirect implementation of the rule.ABAP / SAP SQL
MaintainabilityASCMM-MNT-08: Source Element Excessive SizeUnit7842Avoid large Artifacts - too many Lines of CodeDirect implementation of the rule.ABAP / SAP SQL
MaintainabilityASCMM-MNT-11: Callable and Method Control Element Excessive Cyclomatic Complexity ValueUnit7766Avoid Artifacts with High Cyclomatic ComplexityDirect implementation of the rule.ABAP / SAP SQL
MaintainabilityASCMM-MNT-13: Callable and Method Control Element Excessive Number of Parameters Unit-  ABAP / SAP SQL
MaintainabilityASCMM-MNT-14: Callable and Method Control Element Excessive Number of Control Elements involving Data Element from Data Manager or File Resource Unit-  ABAP / SAP SQL
MaintainabilityASCMM-MNT-15: Public Member ElementUnit7624Class members should be declared as PrivateThe AIP rule checks for Member elements that are Public or Protected.ABAP / SAP SQL
MaintainabilityASCMM-MNT-15: Public Member ElementUnit7794Avoid Classes with a High Public Data RatioThe Public Data Ratio is directly linked to Public Member Elements.ABAP / SAP SQL
MaintainabilityASCMM-MNT-16: Method Control Element Usage of Member Element from other Class ElementUnit-  ABAP / SAP SQL
MaintainabilityASCMM-MNT-19: Named Callable and Method Control Element Excessive SimilarityUnit7156Avoid Too Many Copy Pasted ArtifactsElement similarity is addressed by the copy/paste ratio measured by the AIP rule.ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-01: Static Block Element containing Class Instance Creation Control ElementUnit-  ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-02: Immutable Storable and Member Data Element CreationUnitN/A This rule is not applicable to ABAP language.ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-03: Static Member Data Element outside of a Singleton Class ElementUnit-  ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-06: Large Data Resource ColumnSet Excessive Number of Index ElementsUnit7348Avoid too many Indexes on one TableDirect implementation of the rule.ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-07: Large Data Resource ColumnSet with Index Element of  Excessive SizeUnit7350Avoid Tables having Indexes with a too large Index definitionDirect implementation of the rule.ABAP / SAP SQL
Performance EfficiencyASCPEM-PRF-13: Data Resource Access not using Connection Pooling capabilityUnit-  ABAP / SAP SQL
ReliabilityASCRM-CWE-252-resource: Unchecked Return Parameter Value of named Callable and Method Control Element with Read, Write, and Manage Access to Platform ResourceUnit8012Avoid unchecked return code (SY-SUBRC) after opening and reading datasetDirect implementation of the rule for ABAP and dataset accesses.ABAP / SAP SQL
ReliabilityASCRM-CWE-396: Declaration of Catch for Generic ExceptionUnit-  ABAP / SAP SQL
ReliabilityASCRM-CWE-397: Declaration of Throws for Generic ExceptionUnit-  ABAP / SAP SQL
ReliabilityASCRM-CWE-456: Storable and Member Data Element Missing InitializationUnit-  ABAP / SAP SQL
ReliabilityASCRM-CWE-674:Uncontrolled RecursionUnit7388Avoid artifacts having recursive callsDirect implementation of the rule.ABAP / SAP SQL
ReliabilityASCRM-RLB-01: Empty Exception BlockUnit7788Avoid empty catch blocksDirect implementation of the rule.ABAP / SAP SQL
ReliabilityASCRM-RLB-01: Empty Exception BlockUnit8106Avoid empty IF-ENDIF blocksEmpty conditional blocks can be considered as a way to not manage situations like catch block without any statement. This AIP rule checks for IF..ENDIF blocks that contain no statement.ABAP / SAP SQL
ReliabilityASCRM-RLB-06: Storable or Member Data Element containing Pointer Item Element without Proper Copy Control ElementUnitN/A This rule is not applicable to ABAP language.ABAP / SAP SQL
ReliabilityASCRM-RLB-07: Class Instance Self Destruction Control ElementUnitN/A Not applicable in the ABAP context, where concept of destructor is not part of the ABAP Object language specification.ABAP / SAP SQL
ReliabilityASCRM-RLB-08: Named Callable and Method Control Elements with Variadic Parameter ElementUnitN/A This rule is not applicable to ABAP language.ABAP / SAP SQL
ReliabilityASCRM-RLB-09: Float Type Storable and Member Data Element Comparison with Equality OperatorUnit-  ABAP / SAP SQL
ReliabilityASCRM-RLB-12: Singleton Class Instance Creation without Proper Lock Element ManagementUnit-  ABAP / SAP SQL
ReliabilityASCRM-RLB-15: Class Element with Virtual Method Element without Virtual DestructorUnitN/A Not applicable in the ABAP context, where concept of destructor is not part of the ABAP Object language specification.ABAP / SAP SQL
ReliabilityASCRM-RLB-16: Parent Class Element without Virtual Destructor Method ElementUnitN/A Not applicable in the ABAP context, where concept of destructor is not part of the ABAP Object language specification.ABAP / SAP SQL
ReliabilityASCRM-RLB-17: Child Class Element without Virtual Destructor unlike its Parent Class Element UnitN/A Not applicable in the ABAP context, where concept of destructor is not part of the ABAP Object language specification.ABAP / SAP SQL
ReliabilityASCRM-RLB-18: Storable and Member Data Element Initialization with Hard-Coded Network Resource Configuration DataUnit7526Avoid using hardcoded pathsImplementation of the rule for hard-coded paths.ABAP / SAP SQL
ReliabilityASCRM-RLB-19: Synchronous Call Time-Out AbsenceUnit-  ABAP / SAP SQL
SecurityASCSM-CWE-252-resource: Unchecked Return Parameter Value of named Callable and Method Control Element with Read, Write, and Manage Access to Platform ResourceUnit-  ABAP / SAP SQL
SecurityASCSM-CWE-327: Broken or Risky Cryptographic Algorithm UsageUnit-  ABAP / SAP SQL
SecurityASCSM-CWE-396: Declaration of Catch for Generic ExceptionUnit-  ABAP / SAP SQL
SecurityASCSM-CWE-397: Declaration of Throws for Generic ExceptionUnit-  ABAP / SAP SQL
SecurityASCSM-CWE-456: Storable and Member Data Element Missing InitializationUnit-  ABAP / SAP SQL

 

Unit

  • No labels