rule.adoc

Locking on a local variable can undermine synchronization because two different threads running the same method in parallel will potentially lock on different instances of the same object, allowing them to access the synchronized block at the same time.

Noncompliant Code Example

private void DoSomething()
{
  object local = new object();
  // Code potentially modifying the local variable ...

  lock (local) // Noncompliant
  {
    // ...
  }
}

Compliant Solution

private readonly object lockObj = new object();

private void DoSomething()
{
  lock (lockObj)
  {
    //...
  }
}

See

• Lock Statement - lock statement - ensure exclusive access to a shared resource

• MITRE, CWE-412 - Unrestricted Externally Accessible Lock

• MITRE, CWE-413 - Improper Resource Locking

---

Implementation Specification

(visible only on this page)

message.adoc

highlighting.adoc

---

Comments And Links

(visible only on this page)

../comments-and-links.adoc