LANG.STRUCT.EXCP.CATCH : Use of catch

JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

If you access the manual through the hub's Web GUI, the functionality will not be suppressed because the hub is a web server.
Alternatively, your browser may allow you to explicitly disable the security setting that suppresses functionality. See the CodeSonar FAQ for more information.

The code contains a catch expression.

Class Name

Use of catch

Significance

style

Mnemonic

LANG.STRUCT.EXCP.CATCH

Categories

CWE	CWE:396	Declaration of Catch for Generic Exception
CERT-CPP	CERT-CPP:DCL57-CPP	Do not let exceptions escape from destructors or deallocation functions
	CERT-CPP:ERR61-CPP	Catch exceptions by lvalue reference
JSF++	JSF++:208	C++ exceptions shall not be used (i.e. throw, catch and try shall not be used.)

Availability

Available for C++ only (not C).

Enabling

Checks for this warning class are disabled by default, and require the unnormalized C ASTs for the project. To enable them, add the following WARNING_FILTER rule and RETAIN_UNNORMALIZED_C_AST specification to the project configuration file.

RETAIN_UNNORMALIZED_C_AST = Yes
WARNING_FILTER += allow class="Use of catch"

Note that retaining the unnormalized ASTs will increase the disk space used to store the project representation, and may make the analysis take longer.

#include <stdexcept>

int might_throw_something(int x);

int f_catch_stmt(int i){
  int j;
  try {
    j = might_throw_something(i);
  }
  catch (std::logic_error& e){       // 'Use of catch' warning issued here
    // handle std::logic_error
  }
  catch (std::exception& e){         // 'Use of catch' warning issued here
    // handle std::exception other than std::logic_error
  }
  catch (...){                       // 'Use of catch' warning issued here
    // handle all other types
  }
  // may do more computation for j
  // ...
  return j;
}

The following configuration file parameters affect checks for this warning class.

LANG.STRUCT.EXCP.CATCH : Use of catch

Summary

Properties

Example

Relevant Configuration File Parameters