rspec/rules/S2654/java/rule.adoc

24 lines
839 B
Plaintext
Raw Normal View History

2021-04-28 16:49:39 +02:00
Proper synchronization and thread management can be tricky under the best of circumstances, but it's particularly difficult in JEE application, and is even forbidden under some circumstances by the JEE standard.
This rule raises an issue for each ``++Runnable++``, and use of the ``++synchronized++`` keyword.
== Noncompliant Code Example
----
public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
// ...
Runnable r = new Runnable() { // Noncompliant
public void run() {
// ...
}
};
new Thread(r).start();
----
== See
* http://cwe.mitre.org/data/definitions/383.html[MITRE, CWE-383] - J2EE Bad Practices: Direct Use of Threads
* http://cwe.mitre.org/data/definitions/574.html[MITRE, CWE-574] - EJB Bad Practices: Use of Synchronization Primitives