Reliability Error Handling

Case 1: Empty catch block

try {
    processPayment(order);
} catch (PaymentException e) {
    // silently swallowed
}
order.setStatus("COMPLETED"); // runs even if payment failed

Expected finding: High — Swallowed exception. Payment failure is silently ignored, order marked as completed. Log the error and handle the failure state.

Case 2: Promise catch suppression

async function syncData() {
  await fetch('/api/sync').catch(() => {}); // errors silently ignored
  console.log('Sync complete'); // logs success even on failure
}

Expected finding: High — Error suppressed. Failed sync appears successful. Handle or propagate the error.

Counter-Examples

Counter 1: Error logged and handled

try {
    processPayment(order);
} catch (PaymentException e) {
    logger.error("Payment failed for order {}", order.getId(), e);
    order.setStatus("PAYMENT_FAILED");
    throw new OrderProcessingException("Payment failed", e);
}

Why it's correct: Error is logged, state is updated, and exception is propagated.

Binary Eval Assertions

• Detects swallowed exception in eval case 1
• Detects catch suppression in eval case 2
• Does NOT flag counter-example 1
• Finding identifies the consequence of swallowed error
• Severity assigned as high