Page Information

Title:	EXP01-J. Do not use a null in a case where an object is required
Author:	Dhruv Mohindra	May 12, 2009
Last Changed by:	David Svoboda	Aug 06, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/aDdGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (2)     Page: EXP02-J. Do not use the Object.equals() method to compare two arrays     Page: ERR08-J. Do not catch NullPointerException or any of its ancestors

Parent Page     Page: Rule 02. Expressions (EXP)

• cwe-754
• android
• dos-enable
• rule
• android-implementation-detail-java
• exp
• analyzable

Time	Editor
Aug 06, 2025 10:14	Jill Britton	View Changes
REM cost reform
Mar 05, 2025 11:29	Jill Britton	View Changes
Jan 14, 2025 09:56	David Svoboda	View Changes
Jan 25, 2022 02:55	Winfried Gerlach	View Changes
Jan 24, 2022 11:43	Winfried Gerlach

External Links (19)
    https://www.safaribooksonline.com/library/view/secure-codin…
    https://wiki.sei.cmu.edu/confluence/display/java/Rule+AA.+R…
    cwe.mitre.org/data/definitions/476.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://pvs-studio.com/en/docs/warnings/v6008/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    docs.oracle.com/javase/8/docs/api/java/util/Optional.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    www.oracle.com/technetwork/articles/java/java8-optional-217…
    https://rules.sonarsource.com/java/RSPEC-2637
    https://wiki.sei.cmu.edu/confluence/display/java/PVS-Studio
    java.sun.com/javase/6/docs/api/java/security/AccessControll…
    cwe.mitre.org/
    bugs.sun.com/bugdatabase/view_bug.do?bug_id=6514454
    https://rules.sonarsource.com/java/RSPEC-2447
    https://rules.sonarsource.com/java/RSPEC-2259
    https://pvs-studio.com/en/docs/warnings/v6073/
    https://rules.sonarsource.com/java/RSPEC-2225
    https://pvs-studio.com/en/docs/warnings/v6093/

SEI CERT Oracle Coding Standard for Java (22)     Page: Klocwork_V     Page: Coverity     Page: CodeSonar     Page: Klocwork     Page: SpotBugs_V     Page: Fortify_V     Page: Rule BB. Glossary     Page: Fortify     Page: SonarQube_V     Home page: SEI CERT Oracle Coding Standard for Java     Page: Rule AA. References     Page: The Checker Framework     Page: Findbugs     Page: SonarQube     Page: ERR08-J. Do not catch NullPointerException or any of its ancestors     Page: The Checker Framework_V     Page: Parasoft     Page: Findbugs_V     Page: CodeSonar_V     Page: Parasoft_V     Page: PVS-Studio_V     Page: SpotBugs

SEI CERT C Coding Standard (2)     Page: EXP34-C. Do not dereference null pointers     Home page: SEI CERT C Coding Standard