CodeQL documentation

Empty except

ID: py/empty-except
Kind: problem
Security severity: 
Severity: recommendation
Precision: high
Tags:
   - reliability
   - maintainability
   - external/cwe/cwe-390
Query suites:
   - python-security-and-quality.qls

Click to see the query in the CodeQL repository

Ignoring exceptions that should be dealt with in some way is almost always a bad idea. The loss of information can lead to hard to debug errors and incomplete log files. It is even possible that ignoring an exception can cause a security vulnerability. An empty except block may be an indication that the programmer intended to handle the exception but never wrote the code to do so.

Recommendation

Ensure all exceptions are handled correctly.

Example

In this example the program keeps running with the same privileges if it fails to drop to lower privileges.

# ...
try:
    security_manager.drop_privileges()
except SecurityError:
    pass
# ...

References

  • Common Weakness Enumeration: CWE-390.

  • © GitHub, Inc.
  • Terms
  • Privacy