CERT为各类 Java的软件系统对《The CERT Oracle Secure Coding Standard for Java》的遵照状况作了一些分析,在咱们的记录中,最容易被违背的规则有这几条:spa
A. EXP01-J. Never dereference null pointers(永远不要间接引用空指针)指针
B. ERR01-J. Do not allow exceptions to expose sensitive information (不要让异常暴露敏感信息)orm
C. ERR07-J. Do not throw RuntimeException, Exception, or Throwable(不要抛出RuntimeException、 Exception、或Throwable类型的异常)资源
D. ERR08-J. Do not catch NullPointerException or any of its ancestors(不要捕获NullPointerException异常或它的任何父类)it
E. FIO04-J. Release resources when they are no longer needed(当再也不须要某个资源的时候当即释放它)io
F. ERR00-J. Do not suppress or ignore checked exceptions(不要抑制或忽略查到的异常)form