Empty Exception Block

Opis

An invokable code block contains an exception handling block that does not contain any code, i.e. is empty.

Skutki

• Other

  Reduce Reliability

  When an exception handling block (such as a Catch and Finally block) is used, but that block is empty, this can prevent the product from running reliably. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

Zapobieganie

• Implementation

  For every exception block add code that handles the specific exception in the way intended by the application.

Słabość nadrzędna

• CWE-1071 Empty Code Block

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Reliability Measure (ASCRM) — Object Management Group (OMG), ASCRM-RLB-1, 2016