CERT爲各類 Java的軟件系統對《The CERT Oracle Secure Coding Standard for Java》的遵照狀況作了一些分析,在咱們的記錄中,最容易被違背的規則有這幾條:spa
A. EXP01-J. Never dereference null pointers(永遠不要間接引用空指針)指針
B. ERR01-J. Do not allow exceptions to expose sensitive information (不要讓異常暴露敏感信息)orm
C. ERR07-J. Do not throw RuntimeException, Exception, or Throwable(不要拋出RuntimeException、 Exception、或Throwable類型的異常)資源
D. ERR08-J. Do not catch NullPointerException or any of its ancestors(不要捕獲NullPointerException異常或它的任何父類)it
E. FIO04-J. Release resources when they are no longer needed(當再也不須要某個資源的時候當即釋放它)io
F. ERR00-J. Do not suppress or ignore checked exceptions(不要抑制或忽略查到的異常)form