CWE - CWE-568: finalize() Method Without super.finalize() (1.1)

Home > CWE List > CWE- Individual Dictionary Definition (1.1)

CWE-568: finalize() Method Without super.finalize()

Individual Definition in a New Window

finalize() Method Without super.finalize()

Status: Draft

Weakness ID: 568 (Weakness Variant)

Description

Summary

The software contains a finalize() method that does not call super.finalize().

Potential Mitigations

Call the super.finalize() method.

Use static analysis tools to spot such issues in your code.

Demonstrative Examples

The following method omits the call to super.finalize().

Java Example:

protected void finalize() {

discardNative();

}

Other Notes

The Java Language Specification states that it is a good practice for a finalize() method to call super.finalize()

Relationships

Nature	Type	ID	Name	View(s) this relationship pertains to
ChildOf	Category	399	Resource Management Errors	Development Concepts (primary)699
ChildOf	Weakness Class	573	Failure to Follow Specification	Research Concepts1000
ChildOf	Weakness Base	404	Improper Resource Shutdown or Release	Research Concepts (primary)1000

Applicable Platforms

Languages

Java

Time of Introduction

Implementation

Content History

Modifications

Eric Dalci. Cigital. 2008-07-01. (External)

updated Potential_Mitigations, Time_of_Introduction

CWE Content Team. MITRE. 2008-09-08. (Internal)

updated Relationships, Other_Notes

Previous Entry Names

Erroneous Finalize Method (changed 2008-04-11)

Page Last Updated: November 24, 2008


	CWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us