CRITICAL
Rule Definition
Program call can raise exception. If they are not properly catched, the troubleshooting get harder and thus cost is higher.
Remediation
Add a try end block outside the program call
Violation Code Sample
call "abcd"; // VIOLATION
onException
writestdout("Error on call to abcd failed");
writestdout("sysvar.errorcode = " + sysvar.errorCode);
writestdout("programming continuing after call to abcd");
Fixed Code Sample
try // FIXED
call "abcd";
onException
writestdout("Error on call to abcd failed");
writestdout("sysvar.errorcode = " + sysvar.errorCode);
end
writestdout("programming continuing after call to abcd");
Related Technologies
Technical Criterion
PCI-DSS4-Requirement-6.2.4 - Software engineering techniques or other methods are defined and in use by software development personnel to prevent or mitigate common software attacks and related vulnerabilities
About CAST Appmarq
CAST Appmarq is by far the biggest repository of data about real IT systems. It's built on thousands of analyzed applications, made of 35 different technologies, by over 300 business organizations across major verticals. It provides IT Leaders with factual key analytics to let them know if their applications are on track.