V-222625
Application Security and Development Security Technical Implementation Guide
Title
Execution flow diagrams and design documents must be created to show how deadlock and recursion issues in web services are being mitigated.
Description
<VulnDiscussion>In order to understand data flows within web services, the process flow of data must be developed and documented. There are several different ways that web service deadlock occurs, many times it is due to when a client invokes a synchronous method on a web service, the client will block waiting for the method to complete. If attempts to call the client (invoke a callback) while the client is waiting for the original method to complete, then each party will deadlock waiting for t...
Fix Text (Documentation Requirement)
Develop web services to account for deadlock issues.