The C++ Standard, [except.handle], paragraph 4 , states [ISO/IEC 14882-2014], states:
The handlers for a try block are tried in order of appearance. That makes it possible to write handlers that can never be executed, for example by placing a handler for a derived class after a handler for a corresponding base class.
Consequently, if two handlers catch exceptions that are derived from the same base class (such as std::exception), the most derived exception must come first.
...
In this noncompliant code example, the first handler will catch catches all exceptions of class B, as well as exceptions of class D, since they are also of class B. Consequently, the second handler will does not catch any exceptions.
| Code Block | ||||
|---|---|---|---|---|
| ||||
// Classes used for exception handling.
class B {};
class D : public B {};
void f() {
try {
// ...
} catch (B &b) {
// ...
} catch (D &d) {
// ...
}
} |
...
In this compliant solution, the first handler will catch catches all exceptions of class D, and the second handler will catch catches all the other exceptions of class B.
| Code Block | ||||
|---|---|---|---|---|
| ||||
// Classes used for exception handling.
class B {};
class D : public B {};
void f() {
try {
// ...
} catch (D &d) {
// ...
} catch (B &b) {
// ...
}
} |
...
Exception handlers with inverted priorities cause unexpected control flow when an exception occurs of the derived type occurs.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
ERR54-CPP | Medium | Likely | Low | P18 | L1 |
...
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Clang |
| -Wexceptions | |||||||
| CP1.ERR36 | Fully implemented | |||||||
| PRQA QA-C++ |
| 4040, 4034 |
Related Vulnerabilities
Search for other vulnerabilities resulting from the violation of this rule on the CERT website.
Related Guidelines
| [MISRA 08] | Rule 15-3-6, "Where multiple handlers are provided in a single try-catch statement or function-try-block for a derived class and some or all of its bases, the handlers shall be ordered most-derived to base class." |
Bibliography
| [ISO/IEC 14882-2014] | 15.3, "Handling an Exception" |
...