CWE-395—Use of NullPointerException Catch to Detect NULL Pointer Dereference

名称

Use of NullPointerException Catch to Detect NULL Pointer Dereference

描述

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Programmers typically catch NullPointerException under three circumstances: Of these three circumstances, only the last is acceptable.

常见后果

范围：

Availability

影响：

DoS: Resource Consumption (CPU)

相关 CWE

• CWE-705Incorrect Control Flow Scoping
• CWE-755Improper Handling of Exceptional ConditionsMedium