org.sonar.plugins.csharp.S2486.html Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of sonar-csharp-plugin Show documentation

Code Analyzer for C#

There is a newer version: 10.2.0.105762

Why is this an issue?
When exceptions occur, it is usually a bad idea to simply ignore them. Instead, it is better to handle them properly, or at least to log them.
This rule only reports on empty catch clauses that catch generic Exceptions.
Noncompliant code example
string text = "";
try
{
    text = File.ReadAllText(fileName);
}
catch (Exception exc) // Noncompliant
{
}

Compliant solution
string text = "";
try
{
    text = File.ReadAllText(fileName);
}
catch (Exception exc)
{
    logger.Log(exc);
}

Exceptions
When a block contains a comment, it is not considered to be empty.
Resources

   OWASP - Top 10 2021 Category A9 - Security Logging and
  Monitoring Failures 
   OWASP - Top 10 2017 Category A10 -
  Insufficient Logging & Monitoring 
   CWE - CWE-390 - Detection of Error Condition Without Action