SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 68

changes.mady.by.user Shannon Haas

Saved on

compared with

New Version 69

changes.mady.by.user Shannon Haas

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Wiki Markup
*ERR09-EX0:* It is permissible for a command-line utility to call {{System.exit()}}, for example, when the required number of arguments are not input \[[Bloch 2008|AA. Bibliography#BlochReferences#Bloch 08]\, \[ESA 2005|AA. Bibliography#ESAReferences#ESA 05]\].

Risk Assessment

Allowing unauthorized calls to System.exit() may lead to denial of service (DoS).

...

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="3ff7eb7330f532d6-39dba2a8-43bb4227-a8a2a496-f7222b3ba1e13b4357bf11f5"><ac:plain-text-body><![CDATA[

[[API 2006

AA. Bibliography#API References#API 06]]

[Method checkExit()

http://java.sun.com/j2se/1.4.2/docs/api/java/lang/SecurityManager.html#checkExit(int)], class Runtime, method addShutdownHook

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="84c7da16d3ae08f8-bb8e8a0a-41ec4114-8605b43f-717758f02bfff74aeb20b619"><ac:plain-text-body><![CDATA[

[[Austin 2000

AA. Bibliography#Austin References#Austin 00]]

[Writing a Security Manager

http://java.sun.com/developer/onlineTraining/Programming/JDCBook/signed2.html]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a7f135621b796760-9f1a3874-4c184b6a-ac369d52-23a9a7ff091ee0bcc4b091fc"><ac:plain-text-body><![CDATA[

[[Darwin 2004

AA. Bibliography#Darwin References#Darwin 04]]

9.5, The Finalize Method

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="a64eeb2716f8b982-c2918285-41794c04-a043b089-7683f990fababdab416df6aa"><ac:plain-text-body><![CDATA[

[[ESA 2005

AA. Bibliography#ESA References#ESA 05]]

Rule 78. Restrict the use of the System.exit method

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="b956218d7ad80623-df856af0-4e774d8a-aac585af-a20ece16c8f07f5de4cbd1ac"><ac:plain-text-body><![CDATA[

[[Goetz 2006

AA. Bibliography#Goetz References#Goetz 06]]

7.4, JVM Shutdown

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="9388e2e88647eb84-2580d626-455e4482-bc22bc32-deefe5d4423996801a8728e0"><ac:plain-text-body><![CDATA[

[[Kalinovsky 2004

AA. Bibliography#Kalinovsky References#Kalinovsky 04]]

Chapter 16, Intercepting a Call to System.exit

]]></ac:plain-text-body></ac:structured-macro>

...