• Home
• org.codehaus.sonar-plugins.java
• java-checks
• 3.2
• source code
• S1174.html

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.sonar.l10n.java.rules.squid.S1174.html Maven / Gradle / Ivy

The contract of the Object.finalize() method is clear: only the Garbage Collector is supposed to call this method.
Making this method public is misleading, because it implies that any caller can use it.
Noncompliant Code Example

public class MyClass {

  @Override
  public void finalize() {    // Non-Compliant
    /* ... */
  }
}

See


 MITRE, CWE-583 - finalize() Method Declared Public
 CERT Java Secure Coding, MET12-J - Do not use finalizers