CWE Rule 248
Description
Rule Description
An exception is thrown from a function, but it is not caught.
Polyspace Implementation
The rule checker checks for Uncaught exception.
Examples
This issue occurs when a function that is called in main()
raises an exception and the exception is not handled. Polyspace® highlights the location in the function body where the unhandled exception is raised and flags the call to the function in main()
. For instance:
void foo(){
throw std::exception(); //Uncaught exception
}
int main(){
foo(); //Defect
return 1;
}
std::bad_alloc
raised by a new
operator remains unhandled.When an exception remains unhandled, the compiler might invoke the function
std::terminate()
, which terminates the program abruptly. The
abrupt termination does not invoke any exit handlers, does not call the destructors
of the constructed objects, and does not unwind the stack.
Exceptions that are unhandled might result in issues such as memory leaks, security vulnerability, and other unintended behaviors. Poorly designed exception handling process might make your program vulnerable to denial-of-service attacks.
To fix this defect, design the exception handling in your code to handle expected
and unexpected exceptions. Call functions that are not noexcept
in try
blocks. Handle the exceptions that these functions might
raise by using matching catch()
blocks. Include a
catch-all
block to handle unexpected exceptions.
#include <exception>
#include <stdexcept>
int flag();
void foo() {
if (flag()==0) {
//....
throw std::exception();
}
}
void bar() {
if (flag()!=0 & flag()!=1) {
throw std::logic_error("Error");
}
}
void fubar() {
foo();
}
int main() {
foo(); //Noncompliant
bar(); //Noncompliant
fubar(); //Noncompliant
}
In this exception, the functions foo()
and
bar()
raise exceptions that are not handled. The function
fubar()
raises an unhandled exception by calling
foo()
. These functions are invoked in
main()
. Because these functions raise exceptions that are
unhandled and are called from the main()
function, Polyspace flags the calls to these functions in main
.
To resolve this defect, handle the exceptions in your code. For instance, in the main()
function, call the exception raising function in a try
block and handle the exception by using a series of catch()
blocks, including a catch(...)
block.
#include <exception>
#include <stdexcept>
int flag();
void foo() {
if (flag()==0) {
//....
throw std::exception();
}
}
void bar() {
if (flag()!=0 & flag()!=1) {
throw std::logic_error("bla");
}
}
void fubar() {
foo();
}
int main() {
try{
foo(); // Defect
bar(); // Defect
fubar(); // Defect
}catch(std::logic_error& e){
//...
}catch(std::exception& e){
//...
}catch(...){
//..
}
}
Check Information
Category: Error Conditions, Return Values, Status Codes |
Version History
Introduced in R2023a
See Also
External Websites
MATLAB Command
You clicked a link that corresponds to this MATLAB command:
Run the command by entering it in the MATLAB Command Window. Web browsers do not support MATLAB commands.
Web サイトの選択
Web サイトを選択すると、翻訳されたコンテンツにアクセスし、地域のイベントやサービスを確認できます。現在の位置情報に基づき、次のサイトの選択を推奨します:
また、以下のリストから Web サイトを選択することもできます。
最適なサイトパフォーマンスの取得方法
中国のサイト (中国語または英語) を選択することで、最適なサイトパフォーマンスが得られます。その他の国の MathWorks のサイトは、お客様の地域からのアクセスが最適化されていません。
南北アメリカ
- América Latina (Español)
- Canada (English)
- United States (English)
ヨーロッパ
- Belgium (English)
- Denmark (English)
- Deutschland (Deutsch)
- España (Español)
- Finland (English)
- France (Français)
- Ireland (English)
- Italia (Italiano)
- Luxembourg (English)
- Netherlands (English)
- Norway (English)
- Österreich (Deutsch)
- Portugal (English)
- Sweden (English)
- Switzerland
- United Kingdom (English)