JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

CodeSonar® 9.2p0 CONFIDENTIAL CodeSecure Inc
C#


CSHARP.DEBUG.CALL : Debug Call (C#)

Summary

A call to a method that should not be used in production code.

For example, calls to Environment.Exit() should not be used in production code, as they would disrupt the availability of your service.

Some operations should not be performed in production code, since they have no effect or have unpredictable effects, or since they might compromise the availability or security of your system.

Properties

Class Name Debug Call (C#)
Significance reliability
Mnemonic CSHARP.DEBUG.CALL
Categories
CWE CWE:489 Active Debug Code
OWASP-2017 OWASP-2017:A6 Security misconfiguration
OWASP-2021 OWASP-2021:A5 Security misconfiguration
OWASP-2025 OWASP-2025:A02 Security Misconfiguration
Availability Available for C# only.
Enabling Checks for this warning class are enabled by default. To disable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += discard class="Debug Call (C#)"

Example

using System;

namespace DocumentationExamples
{


    public class Production
    {
        public static void Main(string[] args)
        {
            Check(args.Length);
        }
        public static void Check(int k)
        {
            if (k <= 0)
                Environment.Exit(-1); // Debug Call (C#) warning issued here 
            else
                Console.WriteLine(k); // Debug Warning (C#) warning issued here 
        }
    }
}

In this example, the programmer should signal the unusual situation in other ways, for instance by throwing an exception or by showing a dialog to the user, then finish the run correctly.

Resolution

Verify if the operation is adequate for production code. Remove it or transform it if that is not the case.

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.

 

To report problems with this documentation, please visit https://support.codesecure.com/.