Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

More information about deprecated methods is available in guideline rule MET15-J. Do not use deprecated or obsolete classes or methods. Also, refer to guideline rule ERR09-J. Do not allow untrusted code to terminate the JVM for information on preventing data corruption when the JVM is shut down abruptly.

...

Removing the default permission java.lang.RuntimePermission stopThread permission from the security policy file prevents threads from being stopped using the Thread.stop() method. This approach is not recommended for trusted, custom-developed code that uses that method because the existing design presumably depends upon the ability of the system to perform this action. Furthermore, the system might not be designed to properly handle the resulting exception. In these cases, it is preferable to implement an alternate design approach corresponding to another compliant solution described in this guidelinerule.

Risk Assessment

Forcing a thread to stop can result in inconsistent object state. Critical resources could also leak if clean-up operations are not carried out as required.

...

Search for vulnerabilities resulting from the violation of this guideline rule on the CERT website.

Bibliography

...