Difference between revisions of "Code Correctness: Erroneous finalize() Method"

Revision as of 18:30, 18 July 2006

This article includes content generously donated to OWASP by

This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.

This finalize() method does not call super.finalize().

The Java Language Specification states that it is a good practice for a finalize() method to call super.finalize().[1]

The following method omits the call to super.finalize().

 protected void finalize() {
                discardNative();
 }

[1] J. Gosling, B. Joy, G. Steele, G. Bracha. The Java Language Specification, Second Edition. Addison-Wesley, 2000.

@@ Line 22: / Line 22: @@
 ==Related Attacks==
-[[:Category:API Abuse Attack]]
 ==Related Vulnerabilities==
@@ Line 39: / Line 37: @@
 [[Category:Code Snippet]]
-[[Category:Use of Dangerous API]]
+[[Category:API Abuse]]