Difference between revisions of "Catch NullPointerException"

Revision as of 11:49, 29 October 2008

This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.

This article includes content generously donated to OWASP by

Last revision (mm/dd/yy): 10/29/2008

It is generally a bad practice to catch NullPointerException.

Programmers typically catch NullPointerException under three circumstances:

The program contains a null pointer dereference. Catching the resulting exception was easier than fixing the underlying problem.
The program explicitly throws a NullPointerException to signal an error condition.
The code is part of a test harness that supplies unexpected input to the classes under test.

Of these three circumstances, only the last is acceptable.

TBD

The following code mistakenly catches a NullPointerException.

	  try {
		mysteryMethod();
	  }
	  catch (NullPointerException npe) {
	  }

Note: A reference to related CWE or CAPEC article should be added when exists. Eg:

@@ Line 2: / Line 2: @@
 {{Template:Fortify}}
+__TOC__
-[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
+[[ASDR Table of Contents]]
-__TOC__
 Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}'''
-[[ASDR_TOC_Vulnerabilities|Vulnerabilities Table of Contents]]
-[[ASDR Table of Contents]]
+[[Category:FIXME|This is the text from the old template. This needs to be rewritten using the new template.]]
@@ Line 70: / Line 69: @@
 * [http://www.link2.com Title for the link2]
-[[Category:FIXME|add links
-In addition, one should classify vulnerability based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Vulnerability]]</nowiki>
-Availability Vulnerability
-Authorization Vulnerability
-Authentication Vulnerability
-Concurrency Vulnerability
-Configuration Vulnerability
-Cryptographic Vulnerability
-Encoding Vulnerability
-Error Handling Vulnerability
-Input Validation Vulnerability
-Logging and Auditing Vulnerability
-Session Management Vulnerability]]
 __NOTOC__
@@ Line 101: / Line 76: @@
 [[Category:OWASP ASDR Project]]
 [[Category:Error Handling Vulnerability]]
+[[Category:Vulnerability]]