CWE•Base•Draft•0 recent CVEs
CWE-586Explicit Call to Finalize()
Description
The product makes an explicit call to the finalize() method from outside the finalizer.
Common consequences
- Integrity,Other→Unexpected State,Quality DegradationWhile the Java Language Specification allows an object's finalize() method to be called from outside the finalizer, doing so is usually a bad idea. For example, calling finalize() explicitly means that finalize() will be called more than on
Potential mitigations
- ImplementationDo not make explicit calls to finalize().