SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 115

changes.mady.by.user Will Snavely

Saved on

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: REM cost reform

...

Failure to encase the wait() or await() methods inside a while loop can lead to indefinite blocking and denial of service (DoS).

Rule

Severity

Likelihood

Remediation Cost

Detectable

Repairable

Priority

Level

THI03-J

Low

Unlikely

Yes

Medium

No

P2

L3

Automated Detection

ToolVersionCheckerDescription
CodeSonar
Klocwork

Include Page

CodeSonar

Klocwork_V

CodeSonar

Klocwork_V

FBCondition.await() not in loop
Wait not in loop
JAVA.
MT_CORRECTNESS.WA_AWAIT_NOT_IN_LOOP
FB.MT_CORRECTNESS.WA_NOT_IN_LOOP
WAIT.IN.LOOP
Parasoft Jtest
Include Page
java:
Parasoft_V
java:
Parasoft_V
TRS
CERT.THI03.UWIL
Implemented
Call 'wait()' and 'await()' only inside a loop that tests the liveness condition
SonarQube
Java Plugin
Include Page
SonarQube
Java Plugin
_V
SonarQube
Java Plugin
_V
S2274
 
"Object.wait(...)" and "Condition.await(...)" should be called inside a "while" loop

Bibliography

[API 2014]

Class Object
Interface Condition

[Bloch 2001]

Item 50, "Never Invoke wait Outside a Loop"

[Goetz 2006]

Section 14.2, "Using Condition Queues"

[Lea 2000]

Section 1.3.2, "Liveness"
Section 3.2.2, "Monitor Mechanics"

...


...