This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Code Correctness: Erroneous finalize() Method
From OWASP
This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.
Abstract
This finalize() method does not call super.finalize().
Description
The Java Language Specification states that it is a good practice for a finalize() method to call super.finalize().[1]
Examples
The following method omits the call to super.finalize().
protected void finalize() { discardNative(); }
References
[1] J. Gosling, B. Joy, G. Steele, G. Bracha. The Java Language Specification, Second Edition. Addison-Wesley, 2000.