Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Thread start-up startup can be misleading because sometimes the code appears can appear to be performing the its function correctly , when it is actually being executed by the wrong thread. Ensure that threads are started correctly.
Invoking the Thread.start() method tells instructs the Java runtimes runtime to start executing the thread's run() method using the started thread. Invoking a Thread object's run() method directly is incorrect. When a a Thread object's run() method is invoked directly, the statements in the run() method are executed by the current thread , rather than by the newly created thread. Furthermore, if the Thread object was constructed by instantiating a subclass of Thread that fails to override the run() method rather than being constructed from a Runnable object, any calls to the subclass's run() method would invoke Thread.run(), which does nothing. Consequently, programs must not directly invoking invoke a Thread object's run() method is forbidden.

Noncompliant Code Example

This noncompliant code example explicitly invokes run() in the context of the current thread.:

Code Block
bgColor#FFCCCC

public final class Foo implements Runnable {
  @Override public void run() {
    // ...
  }

  public static void main(String[] args) {
    Foo foo = new Foo();
    new Thread(foo).run();
  }
}

The newly created thread is never started because of the incorrect assumption that run() starts the new thread. Consequently, the statements in the run() method are executed by the current thread rather than by the new thread.

Compliant Solution

This compliant solution correctly uses the start() method to tell the Java runtimes runtime to start a new thread.:

Code Block
bgColor#ccccff

public final class Foo implements Runnable {
  @Override public void run() {
    // ...
  }

  public static void main(String[] args) {
    Foo foo = new Foo();
    new Thread(foo).start();
  }
}

Exceptions

THI02THI00-J-EX0: The run() method may be directly invoked when during unit testing functionality. Note that this method cannot be used to test a class for multithreaded use.

Given a Thread object that has been was constructed with a runnable argument, when invoking the Thread.run() method, the Thread object may be cast to Runnable to eliminate analyzer diagnostics.:

Code Block
bgColor#ccccff

public void sampleRunTest() {

  Thread thread = new Thread(new Runnable() {
      @Override public void run() {
        // ...
      }
    });
  
  ((Runnable) thread).run();  // ExceptionTHI00-J-EX0: ThisDoes does not start a new thread

}

Casting a thread to Runnable before calling the run() method documents that the explicit call to Thread.run() is intentional. Adding an explanatory comment alongside the invocation is highly recommended.

THI02THI00-J-EX1: Runtime system code involved in starting new threads is permitted to invoke a Thread object's run() method directly; this is an obvious necessity for a working Java runtime system. Note that the likelihood that this exception applies to user-written code is vanishingly small.

Risk Assessment

Failing Failure to start threads correctly can cause unexpected behavior.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

THI02

THI00-J

low

Low

probable

Probable

medium

Medium

P4

L3

Automated Detection

Automated detection of direct invocations of Thread object's .run() methods appears to be is straightforward. Sound automated determination of which specific invocations are permitted may be infeasible. Heuristic approaches may be useful.

Related Guidelines

Tool
Version
Checker
Description
CodeSonar

Include Page
CodeSonar_V
CodeSonar_V

JAVA.CONCURRENCY.LOCK.SCTBSynchronous Call to Thread Body (Java)
Coverity7.5DC.THREADING.thread_runImplemented
Parasoft Jtest
Include Page
Parasoft_V
Parasoft_V
CERT.THI00.IRUNDo not call the 'run()' method directly on classes extending 'java.lang.Thread' or implementing 'java.lang.Runnable'
PVS-Studio

Include Page
PVS-Studio_V
PVS-Studio_V

V6064
SonarQube
Include Page
SonarQube_V
SonarQube_V
S1217Thread.run() should not be called directly

Related Guidelines

MITRE CWE

CWE-572,

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="3d733a0c-52b3-4faa-ba43-41c2971f92c1"><ac:plain-text-body><![CDATA[

[[MITRE 2009

AA. Bibliography#MITRE 09]]

[CWE-572

http://cwe.mitre.org/data/definitions/572.html] "

Call to Thread run() instead of start()

"

]]></ac:plain-text-body></ac:structured-macro>

Bibliography

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="e9198072-3f3a-452c-b86b-d8a38d0e53e2"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API 06]]

Interface Runnable and class Thread

]]></ac:plain-text-body></ac:structured-macro>

Android Implementation Details

Android provides a couple of solutions for threading. The Android Developers Blog's article "Painless Threading" discusses those solutions.

Bibliography


...

Image Added Image Added Image Removed      09. Thread APIs (THI)      Image Modified