Page History

...

• Do not supress/ignore exceptions: This happens when an empty catch block is defined. The program catches the exception but does not perform any recovery or notification
• Masking of original exception by a new one: A new exception within a block may in certain cases mask the original exception
• Logging the same exception more than once: This creates ambiguity while tracing
• Throwing Exception and Throwable
• Encapsulating the original exception and throwing a completely new exception from the block

References

Risk Assessment

Not handling exceptions properly may result in information being lost, problems being overlooked, or too much information being passed to the user.

Automated Detection

TODO

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

References

\[[Doshi 03|AA. Java References#Doshi 03]\]
\[[JLS 05|AA. Java References#JLS 05]\] CHAPTER 11, Exceptions
\[[Tutorials 08|AA. Java References#tutorials 08]\] [Exceptions|

http://www.onjava.com/pub/a/onjava/2003/11/19/exceptions.html?page=2^{Image Removed}

http://java.sun.com/docs/books/tutorial/essential/exceptions/index.html

Image Removed

]
\[[Müller 02|AA. Java References#Müller 02]\]