J2EE Bad Practices: Direct Use of Threads

Opis

Thread management in a Web application is forbidden in some circumstances and is always highly error prone.

Thread management in a web application is forbidden by the J2EE standard in some circumstances and is always highly error prone. Managing threads is difficult and is likely to interfere in unpredictable ways with the behavior of the application container. Even without interfering with the container, thread management usually leads to bugs that are hard to detect and diagnose like deadlock, race conditions, and other synchronization errors.

Skutki

• Other

  Quality Degradation

Zapobieganie

• Architecture and Design

  For EJB, use framework approaches for parallel execution, instead of using threads.

Słabość nadrzędna

• CWE-695 Use of Low-Level Functionality

Kiedy powstaje

• Implementation

Dotyczy

Java, Web Based, Web Server

Źródła

1. Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors — Katrina Tsipenyuk, Brian Chess, Gary McGraw, NIST, 2005