try { 
    //code to do  IO operations 
    return var1; 
} Catch(Exception e) { 
    return var2; 
} finally{ 
    return var3; 
} 

From security view point problem with above code is