The handler functions new_handler
, terminate_handler
, and unexpected_handler
can be globally replaced by custom implementations, as specified by [handler.functions], paragraph 2, of the C++ Standard [ISO/IEC 14882-2014]. For instance, an application could set a custom termination handler by calling std::set_terminate()
, and the custom termination handler may log the termination for later auditing. However, the C++ Standard, [res.on.functions], paragraph 1, states the following:
In certain cases (replacement functions, handler functions, operations on types used to instantiate standard library template components), the C++ standard library depends on components supplied by a C++ program. If these components do not meet their requirements, the Standard places no requirements on the implementation.
Paragraph 2 further states, in part, further states the following:
In particular, the effects are undefined in the following cases:
— for handler functions, if the installed handler function does not implement the semantics of the applicable Required behavior: paragraph
A replacement for any of the handler functions must meet the semantic requirements specified by the appropriate Required behavior: clause of the replaced function.
New Handler
The requirements for a replacement new_handler
are specified by [new.handler], paragraph 2:
Required behavior: A
new_handler
shall perform one of the following:
— make more storage available for allocation and then return;
— throw an exception of typebad_alloc
or a class derived frombad_alloc
;
— terminate execution of the program without returning to the caller;
Terminate Handler
The requirements for a replacement terminate_handler
are specified by [terminate.handler], paragraph 2:
Required behavior: A
terminate_handler
shall terminate execution of the program without returning to the caller.
Unexpected Handler
The requirements for a replacement unexpected_handler
are specified by [unexpected.handler], paragraph 2.
Required behavior: An
unexpected_handler
shall not return. See also 15.5.2.
unexpected_handler
is a deprecated feature of C++.
Noncompliant Code Example
...
In this compliant solution, custom_new_handler()
does not disregard uses the return value from reclaim_resources()
. If it returns 0
, then an there will be insufficient memory for operator new
to succeed. Hence, an exception of type std::bad_alloc
is thrown, meeting the requirements for the replacement handler.
...
Failing to meet the required behavior for a replacement handler results in undefined behavior.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
OOP56-CPP | Low | Probable | High | P2 | L3 |
Automated Detection
Tool | Version | Checker | Description |
---|
Helix QAC |
| DF4776, DF4777, DF4778, DF4779 | |||||||
Parasoft C/C++test |
| CERT_CPP-OOP56-a | Properly define terminate handlers | ||||||
Polyspace Bug Finder |
| Checks for replacement handler function that does not meet requirements (rule fully covered) |
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
Bibliography
[ISO/IEC 14882-2014] | Subclause 17.6.4.8, "Other Functions" Subclause 18.6.2.3, "Type new_handler " Subclause 18.8.3.1, "Type terminate_handler "Subclause D.11.1, "Type unexpected_handler " |
...