Page History

Many functions return useful values whether or not the function has side effects. In most cases, this value is used to signify signifies whether the function successfully completed its task or if some error occurred. Other times, the value is the result of some computation and is an integral part of the function's API.

...

my $source;
open(SOURCEmy $SOURCE, "<", $source);
@lines = (<SOURCE><$SOURCE>);
close(SOURCE$SOURCE);

It makes sure the variable containing the file name is properly defined, but it does nothing else to catch errors. Consequently, any error, such as the file not existing, being unreadable, or containing too much data to read into memory, will cause the program to abort.

...

my $source;
open(SOURCEmy $SOURCE, "<", $source) or croak "error opening $source: $!";
@lines = (<SOURCE><$SOURCE>);
close(SOURCE$SOURCE) or croak "error closing $source: $!";

If any error occurs, the program calls the croak() function, passing it a string that includes both the source file being opened and the $! variable, which contains a system error string based on the value of errno, which is set to a useful value when the open(2) or close(2) functions fail.

Exceptions

EXP32-EX1:EX0: If the return value is inconsequential or if any errors can be safely ignored, such as for functions called because of their side effects, the function's return value may be silently discarded.

EXP32-EX2:EX1: The autodie module is designed to replace functions that return a value indicating failure with functions that throw an exception on failure. When autodie is in use, any functions it redefines may be safely ignored.

use autodie;

my $source;
open(SOURCEmy $SOURCE, "<", $source);
@lines = (<SOURCE><$SOURCE>);
close(SOURCE$SOURCE);

EXP32-EX3:EX2: Functions that send data to standard output or standard error need not have their return values checked. This includes print and printf, but only if their filehandle file handle argument is not supplied , or is explicitly set to *STDOUT or *STDERR. If they send their output to any other filehandlefile handle, their return value must be checked.

EXP32:EX3: When inside error-handling code, function calls that are used to release resources, such as close(), need not have their return values checked. Any code that falls under this exception should be explicitly documented as such.

Risk Assessment

Failure to handle error codes or other values returned by functions can lead to incorrect program flow and violations of data integrity.

Automated Detection

Related Guidelines

...

...

...

...

...

...

...

...

...

Bibliography

\[[CPAN|AA. Bibliography#CPAN]\] [autodie|http://search.cpan.org/~pjf/autodie-2.10/lib/autodie.pm]
\[[Open Group 2008|AA. Bibliography#Open Group 08]\] [{{open()}}|http://www.opengroup.org/onlinepubs/000095399/functions/open.html]

[Conway 2005]	"Error Checking," p. 208
[CPAN]	autodie
[Open Group 2008]	open()

Image Added Image Added EXP31-PL. Do not use the two-argument form of open()      02. Expressions      Image Modified