Use of NullPointerException Catch to Detect NULL Pointer Dereference
CWE-395
CVSS severity (NVD, All Time)
Per technology (GHSA, All time)
100%-Pip
Short description
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
Extended description
Programmers typically catch NullPointerException under three circumstances:
Of these three circumstances, only the last is acceptable.
The program contains a null pointer dereference. Catching the resulting exception was easier than fixing the underlying problem.
The program explicitly throws a NullPointerException to signal an error condition.
The code is part of a test harness that supplies unexpected input to the classes under test.
Best practices to prevent this CWE
Phase: Architecture and Design; Implementation
Do not extensively rely on catching exceptions (especially for validating user input) to handle errors. Handling exceptions can decrease the performance of an application.