Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Null pointer dereferencing refers to treating a null variable as if it were a valid object or field and proceeding to use it without checking its state. Typically, this condition results in a NullPointerException which may sometimes result in denial of service. Additionally, catching and ignoring NullPointerExceptions can result in subsequent program failures or security issues that are very difficult to diagnose (see EXC00-J. Do not suppress or ignore checked exceptions for more details). While other runtime exceptions can produce similar effects, NullPointerException is often found to be the most frequent show-stopper.

...

Dereferencing a null pointer can lead to denial of Service. In multithreaded programs, this can violate cache coherency policies and cause resource leaks. Catching and ignoring {{NullPointerException}}s can result in hard to diagnose system failures or security issues.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

EXP01- J

low

likely

high

P3

L3

...