Re: [Caml-list] Detecting missed checks for error indications in ML code

[Markus Elfring <Markus.Elfring@web.de>]

> > Are you used to programming concerns according to software weaknesses
> > like “CWE-252: Unchecked Return Value”?
> > https://cwe.mitre.org/data/definitions/252.html <https://cwe.mitre.org/data/definitions/252.html>
>
> I would say this is a solved problem.

I got an other impression.


> Or at least, it can be if you program in that way, using the result type to indicate errors.

It seems that there are target conflicts to consider.

The data type “Stdlib.result” corresponds just to another special return value
which can also be overlooked somehow, can't it?


> Actually, this was a solved problem even before the result type was introduced into OCaml,
> because we already had exceptions.

Are there any software documentation challenges remaining for functions
that do not raise (or throw) such exceptions?


> And exceptions were invented exactly for the purpose of ensuring
> that errors can never go unnoticed.

Error handling strategies can vary considerably.
https://wiki.sei.cmu.edu/confluence/display/c/ERR00-C.+Adopt+and+implement+a+consistent+and+comprehensive+error-handling+policy


Regards,
Markus