ECC.EMPTY

An Empty Catch Clause (ECC.EMPTY) warning appears if nothing is written in a catch block. If you catch an exception, it would be better to process it rather than to ignore it.

Example 1

12
13
14
15
16
17
18
19
     public void openFile(String name) {
         try {
             FileInputStream is = new FileInputStream(name);
             // read file ...
         } catch (FileNotFoundException e) {
             // TODO Auto-generated catch block
         }
     }

ECC.EMPTY is reported for line 16: Empty catch clause

External guidance

• CWE-391: Unchecked Error Condition
• CWE-1032: Security Misconfiguration
• OWASP A6:2017 Security Misconfiguration
• OWASP A5:2021 Security Misconfiguration
• STIG-ID:APP3120 Application has error handling vulnerabilities

Security training

Application security training materials provided by Secure Code Warrior.

• Dos Uncaught Errors Training Video - Test your skills with a training example
• Security Misconfiguration Training Video - Test your skills with a training example