Spotting the Sin During Code Review

Scan the code for the following constructs:

Language

Key Words to Look For

ASP.NET, C#, VB.NET, and Java

Exception
Are the correct exceptions being handled, and can your code handle the exceptions appropriately?

Windows (SEH)

__try and __except, or __finally
Are the correct exceptions being handled, and can your code handle the exceptions appropriately?

C++

try and catch, or finally
Are the correct exceptions being handled, and can your code handle the exceptions appropriately?
new operators
Does new throw or return an error?

Windows (Impersonation functions)

Impersonate and SetThreadToken
You must always check the return status of these.



19 Deadly Sins of Software Security. Programming Flaws and How to Fix Them
Writing Secure Code
ISBN: 71626751
EAN: 2147483647
Year: 2003
Pages: 239

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net