2365
Nature Type ID Name Page
HasMember 573 Improper Following of Specification by Caller 844 1298
HasMember 581 Object Model Violation: Just One of Equals and
Hashcode Defined
844 1312
HasMember 583 finalize() Method Declared Public 844 1315
HasMember 586 Explicit Call to Finalize() 844 1320
HasMember 589 Call to Non-ubiquitous API 844 1325
HasMember 617 Reachable Assertion 844 1378
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-851: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 8 - Exceptional Behavior (ERR)
Category ID : 851
Summary
Weaknesses in this category are related to rules in the Exceptional Behavior (ERR) chapter of The
CERT Oracle Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 209 Generation of Error Message Containing Sensitive
Information
844 533
HasMember 230 Improper Handling of Missing Values 844 570
HasMember 232 Improper Handling of Undefined Values 844 573
HasMember 248 Uncaught Exception 844 596
HasMember 382 J2EE Bad Practices: Use of System.exit() 844 933
HasMember 390 Detection of Error Condition Without Action 844 943
HasMember 395 Use of NullPointerException Catch to Detect NULL
Pointer Dereference
844 957
HasMember 397 Declaration of Throws for Generic Exception 844 961
HasMember 460 Improper Cleanup on Thrown Exception 844 1102
HasMember 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere
844 1193
HasMember 584 Return Inside Finally Block 844 1317
HasMember 600 Uncaught Exception in Servlet 844 1343
HasMember 690 Unchecked Return Value to NULL Pointer Dereference 844 1514
HasMember 703 Improper Check or Handling of Exceptional Conditions 844 1535
HasMember 705 Incorrect Control Flow Scoping 844 1542
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
CWE Version 4.14
CWE-852: The CERT Oracle Secure Coding Standard for Java (2011) Chapter 9 - Visibility and
Atomicity (VNA)
CWE-852: The CERT Oracle Secure Coding Standard for
Java (2011) Chapter 9 - Visibility and Atomicity (VNA) 2366
Category-852: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 9 - Visibility and Atomicity (VNA)
Category ID : 852
Summary
Weaknesses in this category are related to rules in the Visibility and Atomicity (VNA) chapter of The
CERT Oracle Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 362 Concurrent Execution using Shared Resource with
Improper Synchronization ('Race Condition')
844 888
HasMember 366 Race Condition within a Thread 844 904
HasMember 413 Improper Resource Locking 844 1003
HasMember 567 Unsynchronized Access to Shared Data in a
Multithreaded Context
844 1288
HasMember 662 Improper Synchronization 844 1448
HasMember 667 Improper Locking 844 1464
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
Category-853: The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 10 - Locking (LCK)
Category ID : 853
Summary
Weaknesses in this category are related to rules in the Locking (LCK) chapter of The CERT Oracle
Secure Coding Standard for Java (2011).
Membership
Nature Type ID Name Page
MemberOf 844 Weaknesses Addressed by The CERT Oracle Secure
Coding Standard for Java (2011)
844 2564
HasMember 412 Unrestricted Externally Accessible Lock 844 1000
HasMember 413 Improper Resource Locking 844 1003
HasMember 609 Double-Checked Locking 844 1362
HasMember 667 Improper Locking 844 1464
HasMember 820 Missing Synchronization 844 1720
HasMember 833 Deadlock 844 1753
References
[REF-813]Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland and David
Svoboda. "The CERT Oracle Coding Standard for Java". 1st Edition. 2011 September 8. Addison-
Wesley Professional.
CWE Version 4.14
CWE-854: The CERT Oracle Secure Coding Standard for Java (2011) Chapter 11 - Thread APIs
(THI)
CWE-854: The CERT Oracle Secure Coding Standard
for Java (2011) Chapter 11 - Thread APIs (THI)