Recommendations
EXC00-J. Do not suppress or ignore checked exceptions
EXC01-J. Do not allow exceptions to transmit sensitive information
EXC02-J. Prevent exceptions while logging data
EXC03-J. Try to recover gracefully from system errors
EXC04-J. Prevent against inadvertent calls to System.exit() or forced shutdown
EXC05-J. Use a class dedicated to reporting exceptions
EXC06-J. Do not let code throw undeclared checked exceptions
EXC07-J. Restore prior object state on method failure
EXC08-J. Use a logging API to log critical security exceptions
Rules
EXC30-J. Do not exit abruptly from a finally block
EXC31-J. Handle checked exceptions that can be thrown within a finally block
EXC32-J. Do not catch RuntimeException
EXC33-J. Do not throw RuntimeException or Exception
Risk Assessment Summary
Recommendations
Recommendation |
Severity |
Likelihood |
Remediation Cost |
Priority |
Level |
|---|---|---|---|---|---|
EXC00- J |
low |
probable |
medium |
P4 |
L3 |
EXC01- J |
medium |
probable |
high |
P4 |
L3 |
EXC02- J |
medium |
likely |
high |
P6 |
L2 |
EXC03- J |
low |
unlikely |
medium |
P2 |
L3 |
EXC04- J |
low |
unlikely |
medium |
P2 |
L3 |
EXC05- J |
medium |
likely |
high |
P6 |
L2 |
EXC06- J |
low |
unlikely |
high |
P1 |
L3 |
EXC07- J |
low |
probable |
high |
P2 |
L3 |
EXC08- J |
low |
probable |
low |
P6 |
L2 |
Rules
Rules |
Severity |
Likelihood |
Remediation Cost |
Priority |
Level |
|---|---|---|---|---|---|
EXC30- J |
low |
probable |
medium |
P4 |
L3 |
EXC31- J |
low |
unlikely |
medium |
P2 |
L3 |
EXC32- J |
low |
likely |
medium |
P6 |
L2 |
EXC33- J |
low |
likely |
medium |
P6 |
L2 |
MET35-J. Ensure that the clone method calls super.clone The CERT Sun Microsystems Secure Coding Standard for Java EXC00-J. Do not suppress or ignore checked exceptions