mirror of
https://github.com/github/codeql.git
synced 2026-04-29 02:35:15 +02:00
Initial commit of Python queries and QL libraries.
This commit is contained in:
committed by
Mark Shannon
parent
90c75cd362
commit
5f58824d1b
27
python/ql/src/Exceptions/EmptyExcept.qhelp
Normal file
27
python/ql/src/Exceptions/EmptyExcept.qhelp
Normal file
@@ -0,0 +1,27 @@
|
||||
<!DOCTYPE qhelp PUBLIC
|
||||
"-//Semmle//qhelp//EN"
|
||||
"qhelp.dtd">
|
||||
<qhelp>
|
||||
<overview>
|
||||
<p>Ignoring exceptions that should be dealt with in some way is almost always a bad idea.
|
||||
The loss of information can lead to hard to debug errors and incomplete log files.
|
||||
It is even possible that ignoring an exception can cause a security vulnerability.
|
||||
An empty <code>except</code> block may be an indication that the programmer intended to
|
||||
handle the exception but never wrote the code to do so.</p>
|
||||
|
||||
</overview>
|
||||
<recommendation>
|
||||
<p>Ensure all exceptions are handled correctly.</p>
|
||||
|
||||
</recommendation>
|
||||
<example>
|
||||
<p>In this example the program keeps running with the same privileges if it fails to drop to lower
|
||||
privileges.</p>
|
||||
<sample src="EmptyExcept.py" />
|
||||
|
||||
</example>
|
||||
<references>
|
||||
|
||||
|
||||
</references>
|
||||
</qhelp>
|
||||
Reference in New Issue
Block a user