SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 90

changes.mady.by.user Alexandre GIGLEUX

Saved on

compared with

New Version Current

changes.mady.by.user David Svoboda

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: REM cost reform

...

Allowing unauthorized calls to System.exit() may lead to denial of service.

Rule

Severity

Likelihood

Detectable

RepairableRemediation Cost

Priority

Level

ERR09-J

Low

Unlikely

No

NoMedium

P2P1

L3

Automated Detection

CODSTABP.EXIT, SECURITY.EAB.JVMImplemented
Tool
Version
Checker
Description
CodeSonar
Include Page
CodeSonar_V
CodeSonar_V
PMD

JAVA.

J2EE

DEBUG.

DoNotCallSystemExit
FB.BAD_PRACTICE.DM_EXIT

CALL

Debug Call (Java

Do not call System exit
Method invokes System.exit(...

)

Coverity7.5

DC.CODING_STYLE
FB.DM_EXIT

Implemented
Klocwork

Include Page
Klocwork_V
Klocwork_V

SV.UMC.EXIT
UMC.EXIT		 
Parasoft Jtest
Include Page
Parasoft_V
Parasoft_V
CERT.ERR09.JVM
CERT.ERR09.EXIT
Do not stop the JVM in a web component
Do not call methods which terminates Java Virtual Machine
SonarQube
Include Page
SonarQube_V
SonarQube_V
S1147Exit methods should not be called

Related Guidelines

MITRE CWE

CWE-382, J2EE Bad Practices: Use of System.exit()

...