Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| ERR00-J | Low | Probable | Yes | No | P4 | L3 |
| ERR01-J | Medium | Probable | No | Yes | P8 | L2 |
| ERR02-J | Medium | Likely | Yes | No | P12 | L1 |
| ERR03-J | Low | Probable | No | No | P2 | L3 |
| ERR04-J | Low | Probable | Yes | Yes | P6 | L2 |
| ERR05-J | Low | Unlikely | Yes | No | P2 | L3 |
| ERR06-J | Low | Unlikely | No | No | P1 | L3 |
| ERR07-J | Low | Likely | Yes | No | P6 | L2 |
| ERR08-J | Medium | Likely | Yes | No | P12 | L1 |
| ERR09-J | Low | Unlikely | No | No | P1 | L3 |
...
Recommendations
EXC00-J. Do not suppress or ignore checked exceptions
EXC01-J. Do not allow exceptions to transmit sensitive information
EXC02-J. Prevent exceptions while logging data
EXC03-J. Try to recover gracefully from system errors
EXC04-J. Prevent against inadvertent calls to System.exit() or forced shutdown
EXC05-J. Use a class dedicated to reporting exceptions
EXC06-J. Be wary of code that can throw undeclared checked exceptions
Rules
EXC30-J. Do not exit abruptly from a finally block
EXC31-J. Handle checked exceptions that can be thrown within a finally block
EXC32-J. Do not catch RuntimeException
EXC33-J. Do not throw RuntimeException or Exception
Risk Assessment Summary
Recommendations
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
EXC00-J | medium | probable | high | P4 | L3 |
EXC01-J | medium | probable | high | P4 | L3 |
EXC02-J | low | unlikely | high | P1 | L3 |
EXC03-J | low | unlikely | medium | P2 | L3 |
EXC04-J | low | unlikely | medium | P2 | L3 |
Rules
Rules | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
EXC30-J | low | unlikely | medium | P2 | L3 |
EXC31-J | low | unlikely | medium | P2 | L3 |
MET32-J. Ensure that constructors do not call overridable methods The CERT Sun Microsystems Secure Coding Standard for Java EXC00-J. Do not suppress or ignore checked exceptions