Difference between revisions of "Code Correctness: Erroneous finalize() Method"

Revision as of 17:45, 18 July 2006

This article includes content generously donated to OWASP by

This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.

This finalize() method does not call super.finalize().

The Java Language Specification states that it is a good practice for a finalize() method to call super.finalize().[1]

The following method omits the call to super.finalize().

 protected void finalize() {
                discardNative();
 }

[1] J. Gosling, B. Joy, G. Steele, G. Bracha. The Java Language Specification, Second Edition. Addison-Wesley, 2000.

@@ Line 18: / Line 18: @@
                   discardNative();
    }
+==Related Threats==
+==Related Attacks==
+[[:Category:API Abuse]]
+==Related Vulnerabilities==
+==Related Countermeasures==
 ==References==
 [1] J. Gosling, B. Joy, G. Steele, G. Bracha. The Java Language Specification, Second Edition. Addison-Wesley, 2000.
-[[Category:API Abuse]]
 [[Category:Java]]
@@ Line 30: / Line 38: @@
 [[Category:Code Snippet]]
+[[Category:Use of Dangerous API]]