SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.9.8
Threshold is medium
Effort is default
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 633 |
184 |
0 |
0 |
org.apache.commons.collections4.MapUtils
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.MapUtils.getBoolean(Map, Object) has Boolean return type and returns explicit null |
BAD_PRACTICE |
NP_BOOLEAN_RETURN_NULL |
246 |
Medium |
org.apache.commons.collections4.Predicate
| Bug |
Category |
Details |
Line |
Priority |
| The class name org.apache.commons.collections4.Predicate shadows the simple name of implemented interface java.util.function.Predicate |
BAD_PRACTICE |
NM_SAME_SIMPLE_NAME_AS_INTERFACE |
50 |
Medium |
org.apache.commons.collections4.bag.AbstractMapBag
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bag.AbstractMapBag.uniqueSet() may expose internal representation by returning AbstractMapBag.uniqueSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
633 |
Medium |
org.apache.commons.collections4.bidimap.AbstractDualBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.entrySet() may expose internal representation by returning AbstractDualBidiMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
714 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.inverseBidiMap() may expose internal representation by returning AbstractDualBidiMap.inverseBidiMap |
MALICIOUS_CODE |
EI_EXPOSE_REP |
742 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.keySet() may expose internal representation by returning AbstractDualBidiMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
764 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.values() may expose internal representation by returning AbstractDualBidiMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
843 |
Medium |
org.apache.commons.collections4.bidimap.AbstractDualBidiMap$EntrySetIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap$EntrySetIterator.next() may expose internal representation by returning AbstractDualBidiMap$EntrySetIterator.last |
MALICIOUS_CODE |
EI_EXPOSE_REP |
227 |
Medium |
org.apache.commons.collections4.bidimap.DualLinkedHashBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method putAll(Map) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
101 |
Medium |
org.apache.commons.collections4.bidimap.TreeBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.bidimap.TreeBidiMap at new org.apache.commons.collections4.bidimap.TreeBidiMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
1043 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.bidimap.TreeBidiMap.doEquals(Object, TreeBidiMap$DataElement) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
1139 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.entrySet() may expose internal representation by returning TreeBidiMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1499 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.inverseBidiMap() may expose internal representation by returning TreeBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1709 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.keySet() may expose internal representation by returning TreeBidiMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1739 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.values() may expose internal representation by returning TreeBidiMap.valuesSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
2225 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.equals(Object) is unusual |
STYLE |
EQ_UNUSUAL |
1510 |
Medium |
| Overridable method put(Comparable, Comparable) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1986 |
Medium |
org.apache.commons.collections4.bidimap.TreeBidiMap$Inverse
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.TreeBidiMap$Inverse.equals(Object) is unusual |
STYLE |
EQ_UNUSUAL |
305 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableBidiMap.inverseBidiMap() may expose internal representation by returning UnmodifiableBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
99 |
Medium |
| Inconsistent synchronization of org.apache.commons.collections4.bidimap.UnmodifiableBidiMap.inverse; locked 80% of time |
MT_CORRECTNESS |
IS2_INCONSISTENT_SYNC |
97 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableOrderedBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableOrderedBidiMap.inverseOrderedBidiMap() may expose internal representation by returning UnmodifiableOrderedBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
109 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableSortedBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableSortedBidiMap.inverseBidiMap() may expose internal representation by returning UnmodifiableSortedBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
107 |
Medium |
org.apache.commons.collections4.bloomfilter.BitMapExtractor$1Bits
| Bug |
Category |
Details |
Line |
Priority |
| Uncallable method org.apache.commons.collections4.bloomfilter.BitMapExtractor$1Bits.add(long) defined in anonymous class |
CORRECTNESS |
UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS |
106-114 |
Medium |
org.apache.commons.collections4.bloomfilter.CellExtractor$1$CounterCell
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bloomfilter.CellExtractor$1$CounterCell defines compareTo(CellExtractor$1$CounterCell) and uses Object.equals() |
BAD_PRACTICE |
EQ_COMPARETO_USE_OBJECT_EQUALS |
104 |
Medium |
org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher at new org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
100 |
Medium |
org.apache.commons.collections4.bloomfilter.IndexExtractor$1Indices
| Bug |
Category |
Details |
Line |
Priority |
| Uncallable method org.apache.commons.collections4.bloomfilter.IndexExtractor$1Indices.add(int) defined in anonymous class |
CORRECTNESS |
UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS |
111-113 |
Medium |
org.apache.commons.collections4.bloomfilter.LayeredBloomFilter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.bloomfilter.LayeredBloomFilter(Shape, LayerManager) may expose internal representation by storing an externally mutable object into LayeredBloomFilter.layerManager |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
97 |
Medium |
org.apache.commons.collections4.bloomfilter.WrappedBloomFilter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.bloomfilter.WrappedBloomFilter(BloomFilter) may expose internal representation by storing an externally mutable object into WrappedBloomFilter.wrapped |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
40 |
Medium |
org.apache.commons.collections4.collection.CompositeCollection
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.collection.CompositeCollection.setMutator(CompositeCollection$CollectionMutator) may expose internal representation by storing an externally mutable object into CompositeCollection.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
405 |
Medium |
org.apache.commons.collections4.collection.IndexedCollection
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.collection.IndexedCollection(Collection, Transformer, MultiMap, boolean) may expose internal representation by storing an externally mutable object into IndexedCollection.index |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
103 |
Medium |
org.apache.commons.collections4.comparators.BooleanComparator
| Bug |
Category |
Details |
Line |
Priority |
| Class (org.apache.commons.collections4.comparators.BooleanComparator) using singleton design pattern has non-private constructor. |
CORRECTNESS |
SING_SINGLETON_HAS_NONPRIVATE_CONSTRUCTOR |
109-110 |
Medium |
| Class (org.apache.commons.collections4.comparators.BooleanComparator) using singleton design pattern directly or indirectly implements Serializable interface. |
CORRECTNESS |
SING_SINGLETON_IMPLEMENTS_SERIALIZABLE |
31-185 |
Medium |
org.apache.commons.collections4.comparators.ComparatorChain
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.comparators.ComparatorChain(List, BitSet) may expose internal representation by storing an externally mutable object into ComparatorChain.comparatorChain |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
132 |
Medium |
| new org.apache.commons.collections4.comparators.ComparatorChain(List, BitSet) may expose internal representation by storing an externally mutable object into ComparatorChain.orderingBits |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
133 |
Medium |
org.apache.commons.collections4.comparators.FixedOrderComparator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.comparators.FixedOrderComparator at new org.apache.commons.collections4.comparators.FixedOrderComparator(List) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
110 |
Medium |
| Exception thrown in class org.apache.commons.collections4.comparators.FixedOrderComparator at new org.apache.commons.collections4.comparators.FixedOrderComparator(Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
125 |
Medium |
org.apache.commons.collections4.functors.InstantiateFactory
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.functors.InstantiateFactory at new org.apache.commons.collections4.functors.InstantiateFactory(Class) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
89 |
Medium |
| Exception thrown in class org.apache.commons.collections4.functors.InstantiateFactory at new org.apache.commons.collections4.functors.InstantiateFactory(Class, Class[], Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
104 |
Medium |
org.apache.commons.collections4.functors.MapTransformer
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.functors.MapTransformer.getMap() may expose internal representation by returning MapTransformer.iMap |
MALICIOUS_CODE |
EI_EXPOSE_REP |
75 |
Medium |
org.apache.commons.collections4.iterators.ArrayIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
64 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
78 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
98 |
Medium |
org.apache.commons.collections4.iterators.BoundedIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.BoundedIterator at new org.apache.commons.collections4.iterators.BoundedIterator(Iterator, long, long) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
70 |
Medium |
org.apache.commons.collections4.iterators.CollatingIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
71 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
83 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
118 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
99 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Iterator, Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
134 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Iterator[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
150 |
Medium |
org.apache.commons.collections4.iterators.EntrySetMapIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.EntrySetMapIterator(Map) may expose internal representation by storing an externally mutable object into EntrySetMapIterator.map |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
54 |
Medium |
org.apache.commons.collections4.iterators.EnumerationIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.EnumerationIterator(Enumeration, Collection) may expose internal representation by storing an externally mutable object into EnumerationIterator.collection |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
68 |
Medium |
org.apache.commons.collections4.iterators.FilterIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.FilterIterator.getIterator() may expose internal representation by returning FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
84 |
Medium |
| new org.apache.commons.collections4.iterators.FilterIterator(Iterator) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
63 |
Medium |
| new org.apache.commons.collections4.iterators.FilterIterator(Iterator, Predicate) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
74 |
Medium |
| org.apache.commons.collections4.iterators.FilterIterator.setIterator(Iterator) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
155 |
Medium |
org.apache.commons.collections4.iterators.FilterListIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.FilterListIterator.getListIterator() may expose internal representation by returning FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
137 |
Medium |
| new org.apache.commons.collections4.iterators.FilterListIterator(ListIterator) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
86 |
Medium |
| new org.apache.commons.collections4.iterators.FilterListIterator(ListIterator, Predicate) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
96 |
Medium |
| org.apache.commons.collections4.iterators.FilterListIterator.setListIterator(ListIterator) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
219 |
Medium |
org.apache.commons.collections4.iterators.IteratorChain
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
107 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
127 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator, Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
158 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
142 |
Medium |
org.apache.commons.collections4.iterators.IteratorEnumeration
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.IteratorEnumeration.getIterator() may expose internal representation by returning IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
57 |
Medium |
| new org.apache.commons.collections4.iterators.IteratorEnumeration(Iterator) may expose internal representation by storing an externally mutable object into IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
48 |
Medium |
| org.apache.commons.collections4.iterators.IteratorEnumeration.setIterator(Iterator) may expose internal representation by storing an externally mutable object into IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
88 |
Medium |
org.apache.commons.collections4.iterators.IteratorIterable
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.IteratorIterable.iterator() may expose internal representation by returning IteratorIterable.typeSafeIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
136 |
Medium |
| new org.apache.commons.collections4.iterators.IteratorIterable(Iterator, boolean) may expose internal representation by storing an externally mutable object into IteratorIterable.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
121 |
Medium |
org.apache.commons.collections4.iterators.ObjectArrayIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
60 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
73 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
89 |
Medium |
| org.apache.commons.collections4.iterators.ObjectArrayIterator.getArray() may expose internal representation by returning ObjectArrayIterator.array |
MALICIOUS_CODE |
EI_EXPOSE_REP |
112 |
Medium |
| new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int, int) may expose internal representation by storing an externally mutable object into ObjectArrayIterator.array |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
100 |
Medium |
org.apache.commons.collections4.iterators.ObjectGraphIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.ObjectGraphIterator(Object, Transformer) may expose internal representation by storing an externally mutable object into ObjectGraphIterator.currentIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
118 |
Medium |
| new org.apache.commons.collections4.iterators.ObjectGraphIterator(Iterator) may expose internal representation by storing an externally mutable object into ObjectGraphIterator.currentIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
137 |
Medium |
org.apache.commons.collections4.iterators.PeekingIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.PeekingIterator(Iterator) may expose internal representation by storing an externally mutable object into PeekingIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
75 |
Medium |
org.apache.commons.collections4.iterators.PushbackIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.PushbackIterator(Iterator) may expose internal representation by storing an externally mutable object into PushbackIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
73 |
Medium |
org.apache.commons.collections4.iterators.SkippingIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.SkippingIterator at new org.apache.commons.collections4.iterators.SkippingIterator(Iterator, long) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
56 |
Medium |
org.apache.commons.collections4.iterators.TransformIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.TransformIterator.getIterator() may expose internal representation by returning TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
73 |
Medium |
| org.apache.commons.collections4.iterators.TransformIterator.setIterator(Iterator) may expose internal representation by storing an externally mutable object into TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
113 |
Medium |
org.apache.commons.collections4.keyvalue.TiedMapEntry
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.keyvalue.TiedMapEntry(Map, Object) may expose internal representation by storing an externally mutable object into TiedMapEntry.map |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
55 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList at new org.apache.commons.collections4.list.AbstractLinkedList(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
568 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator at new org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator(AbstractLinkedList, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
112 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList at new org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList(AbstractLinkedList, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
251 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21 at new org.apache.commons.collections4.list.AbstractLinkedListJava21(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
572 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator at new org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator(AbstractLinkedListJava21, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
115 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList at new org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList(AbstractLinkedListJava21, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
254 |
Medium |
org.apache.commons.collections4.list.AbstractSerializableListDecorator
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method setCollection(Collection) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
56 |
Medium |
org.apache.commons.collections4.list.CursorableLinkedList
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
534 |
Medium |
org.apache.commons.collections4.list.NodeCachingLinkedList
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
184 |
Medium |
org.apache.commons.collections4.map.AbstractHashedMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
602 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(int, float) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
617 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
651 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.map.AbstractHashedMap.equals(Object) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
1130 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.entrySet() may expose internal representation by returning AbstractHashedMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1083 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.keySet() may expose internal representation by returning AbstractHashedMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1281 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.values() may expose internal representation by returning AbstractHashedMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1506 |
Medium |
| Overridable method init() is called from method clone() in class org.apache.commons.collections4.map.AbstractHashedMap. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_CLONE |
773 |
Medium |
org.apache.commons.collections4.map.AbstractLinkedMap$LinkEntry
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.AbstractLinkedMap$LinkEntry doesn't override AbstractHashedMap$HashEntry.equals(Object) |
STYLE |
EQ_DOESNT_OVERRIDE_EQUALS |
1 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.AbstractReferenceMap.entrySet() may expose internal representation by returning AbstractHashedMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
902 |
Medium |
| org.apache.commons.collections4.map.AbstractReferenceMap.keySet() may expose internal representation by returning AbstractHashedMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1015 |
Medium |
| org.apache.commons.collections4.map.AbstractReferenceMap.values() may expose internal representation by returning AbstractHashedMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1153 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator
| Bug |
Category |
Details |
Line |
Priority |
| Unread field: org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator.currentValue |
PERFORMANCE |
URF_UNREAD_FIELD |
167 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry at new org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry(AbstractReferenceMap, AbstractHashedMap$HashEntry, int, Object, Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
219 |
Medium |
| new org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry(AbstractReferenceMap, AbstractHashedMap$HashEntry, int, Object, Object) may expose internal representation by storing an externally mutable object into AbstractReferenceMap$ReferenceEntry.parent |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
218 |
Medium |
org.apache.commons.collections4.map.CaseInsensitiveMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
163 |
Medium |
org.apache.commons.collections4.map.CompositeMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
133 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map, Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
156 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map, Map, CompositeMap$MapMutator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
168 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
144 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map[], CompositeMap$MapMutator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
183 |
Medium |
| new org.apache.commons.collections4.map.CompositeMap(Map[], CompositeMap$MapMutator) may expose internal representation by storing an externally mutable object into CompositeMap.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
180 |
Medium |
| org.apache.commons.collections4.map.CompositeMap.setMutator(CompositeMap$MapMutator) may expose internal representation by storing an externally mutable object into CompositeMap.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
527 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.ConcurrentReferenceHashMap at new org.apache.commons.collections4.map.ConcurrentReferenceHashMap(int, float, int, ConcurrentReferenceHashMap$ReferenceType, ConcurrentReferenceHashMap$ReferenceType, EnumSet) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
1454 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder.setOptions(EnumSet) may expose internal representation by storing an externally mutable object into ConcurrentReferenceHashMap$Builder.options |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
246 |
Medium |
| org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder.setSourceMap(Map) may expose internal representation by storing an externally mutable object into ConcurrentReferenceHashMap$Builder.sourceMap |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
257 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment
| Bug |
Category |
Details |
Line |
Priority |
| The field org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment.count is transient but isn't set by deserialization |
BAD_PRACTICE |
SE_TRANSIENT_FIELD_NOT_RESTORED |
Not available |
Medium |
| The field org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment.modCount is transient but isn't set by deserialization |
BAD_PRACTICE |
SE_TRANSIENT_FIELD_NOT_RESTORED |
Not available |
Medium |
org.apache.commons.collections4.map.EntrySetToMapIteratorAdapter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.map.EntrySetToMapIteratorAdapter(Set) may expose internal representation by storing an externally mutable object into EntrySetToMapIteratorAdapter.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
50 |
Medium |
org.apache.commons.collections4.map.Flat3Map
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.Flat3Map at new org.apache.commons.collections4.map.Flat3Map(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
561 |
Medium |
| Overridable method createDelegateMap() is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1047 |
Medium |
| Overridable method put(Object, Object) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1050 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.convertToMap() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
699-701 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.hashCode() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
864-866 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.toString() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
1236-1238 |
Medium |
org.apache.commons.collections4.map.HashedMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
112 |
Medium |
org.apache.commons.collections4.map.LRUMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, float, boolean) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
136 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, int, float) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
165 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, int, float, boolean) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
187 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.map.LRUMap.reuseMapping(AbstractLinkedMap$LinkEntry, int, int, Object, Object) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
511 |
Medium |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
428 |
Medium |
org.apache.commons.collections4.map.LinkedMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
334 |
Medium |
org.apache.commons.collections4.map.MultiValueMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.MultiValueMap at new org.apache.commons.collections4.map.MultiValueMap() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
237 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.MultiValueMap at new org.apache.commons.collections4.map.MultiValueMap(Map, Factory) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
253 |
Medium |
org.apache.commons.collections4.map.ReferenceIdentityMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
243 |
Medium |
org.apache.commons.collections4.map.ReferenceMap
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject(ObjectInputStream) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
186 |
Medium |
org.apache.commons.collections4.map.SingletonMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.SingletonMap at new org.apache.commons.collections4.map.SingletonMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
253 |
Medium |
org.apache.commons.collections4.multimap.AbstractMultiValuedMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.multimap.AbstractMultiValuedMap.keys() may expose internal representation by returning AbstractMultiValuedMap.keysMultiSetView |
MALICIOUS_CODE |
EI_EXPOSE_REP |
742 |
Medium |
org.apache.commons.collections4.multiset.AbstractMultiSet
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.multiset.AbstractMultiSet.entrySet() may expose internal representation by returning AbstractMultiSet.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
376 |
Medium |
| org.apache.commons.collections4.multiset.AbstractMultiSet.uniqueSet() may expose internal representation by returning AbstractMultiSet.uniqueSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
521 |
Medium |
org.apache.commons.collections4.properties.OrderedProperties
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.properties.OrderedProperties doesn't override java.util.Properties.equals(Object) |
STYLE |
EQ_DOESNT_OVERRIDE_EQUALS |
1 |
Medium |
org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties.getProperty(String, String) is unsynchronized, org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties.setProperty(String, String) is synchronized |
MT_CORRECTNESS |
UG_SYNC_SET_UNSYNC_GET |
126 |
Medium |
org.apache.commons.collections4.queue.CircularFifoQueue
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
85 |
Medium |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue(int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
109 |
Medium |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
96 |
Medium |
org.apache.commons.collections4.sequence.SequencesComparator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.sequence.SequencesComparator(List, List, Equator) may expose internal representation by storing an externally mutable object into SequencesComparator.sequence1 |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
165 |
Medium |
| new org.apache.commons.collections4.sequence.SequencesComparator(List, List, Equator) may expose internal representation by storing an externally mutable object into SequencesComparator.sequence2 |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
166 |
Medium |
org.apache.commons.collections4.set.AbstractSerializableSetDecorator
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method setCollection(Collection) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
57 |
Medium |
org.apache.commons.collections4.set.CompositeSet
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.set.CompositeSet at new org.apache.commons.collections4.set.CompositeSet(Set) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
133 |
Medium |
| Exception thrown in class org.apache.commons.collections4.set.CompositeSet at new org.apache.commons.collections4.set.CompositeSet(Set[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
142 |
Medium |
| org.apache.commons.collections4.set.CompositeSet.setMutator(CompositeSet$SetMutator) may expose internal representation by storing an externally mutable object into CompositeSet.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
461 |
Medium |
org.apache.commons.collections4.trie.AbstractPatriciaTrie
| Bug |
Category |
Details |
Line |
Priority |
| Operation on the "size" shared variable in "AbstractPatriciaTrie" class is not atomic |
MT_CORRECTNESS |
AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE |
1420 |
Medium |
| Operation on the "size" shared variable in "AbstractPatriciaTrie" class is not atomic |
MT_CORRECTNESS |
AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE |
1706 |
Medium |
| Shared primitive variable "size" in one thread may not yield the value of the most recent write from another thread |
MT_CORRECTNESS |
AT_STALE_THREAD_WRITE_OF_PRIMITIVE |
1395 |
Medium |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.entrySet() may expose internal representation by returning AbstractPatriciaTrie.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1429 |
Medium |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.keySet() may expose internal representation by returning AbstractPatriciaTrie.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1715 |
Medium |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.values() may expose internal representation by returning AbstractPatriciaTrie.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
2452 |
Medium |
| Overridable method put(Object, Object) is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
2094 |
Medium |
org.apache.commons.collections4.trie.AbstractPatriciaTrie$PrefixRangeMap
| Bug |
Category |
Details |
Line |
Priority |
| Potentially ambiguous invocation of either an outer or inherited method java.util.AbstractMap.keySet() in org.apache.commons.collections4.trie.AbstractPatriciaTrie$PrefixRangeMap.clear() |
STYLE |
IA_AMBIGUOUS_INVOCATION_OF_INHERITED_OR_OUTER_METHOD |
568 |
High |
org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry(Object, Object, int) may expose internal representation by storing an externally mutable object into AbstractPatriciaTrie$TrieEntry.left |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1016 |
Medium |
| new org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry(Object, Object, int) may expose internal representation by storing an externally mutable object into AbstractPatriciaTrie$TrieEntry.predecessor |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1018 |
Medium |
|
