FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is medium
Effort is min
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 279 |
23 |
0 |
0 |
org.apache.commons.jcs.auxiliary.AbstractAuxiliaryCacheMonitor
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.auxiliary.AbstractAuxiliaryCacheMonitor.idlePeriod isn't final and can't be protected from malicious code |
MALICIOUS_CODE |
MS_CANNOT_BE_FINAL |
43 |
Medium |
org.apache.commons.jcs.auxiliary.disk.block.BlockDiskElementDescriptor
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.auxiliary.disk.block.BlockDiskElementDescriptor.getBlocks() may expose internal representation by returning BlockDiskElementDescriptor.blocks |
MALICIOUS_CODE |
EI_EXPOSE_REP |
78 |
Medium |
| org.apache.commons.jcs.auxiliary.disk.block.BlockDiskElementDescriptor.setBlocks(int[]) may expose internal representation by storing an externally mutable object into BlockDiskElementDescriptor.blocks |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
68 |
Medium |
org.apache.commons.jcs.auxiliary.disk.block.BlockDiskKeyStore$LRUMapSizeLimited
| Bug |
Category |
Details |
Line |
Priority |
| Potentially ambiguous invocation of either an outer or inherited method org.apache.commons.jcs.utils.struct.AbstractLRUMap.size() in org.apache.commons.jcs.auxiliary.disk.block.BlockDiskKeyStore$LRUMapSizeLimited.shouldRemove() |
STYLE |
IA_AMBIGUOUS_INVOCATION_OF_INHERITED_OR_OUTER_METHOD |
544 |
High |
org.apache.commons.jcs.auxiliary.disk.jdbc.hsql.HSQLDiskCacheFactory
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.auxiliary.disk.jdbc.hsql.HSQLDiskCacheFactory.setupTable(Connection, String) passes a nonconstant String to an execute or addBatch method on an SQL statement |
SECURITY |
SQL_NONCONSTANT_STRING_PASSED_TO_EXECUTE |
168 |
Medium |
org.apache.commons.jcs.auxiliary.disk.jdbc.mysql.MySQLTableOptimizer
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.auxiliary.disk.jdbc.mysql.MySQLTableOptimizer.getTableStatus(Statement) may fail to clean up java.sql.ResultSet |
EXPERIMENTAL |
OBL_UNSATISFIED_OBLIGATION |
249 |
Medium |
| org.apache.commons.jcs.auxiliary.disk.jdbc.mysql.MySQLTableOptimizer.optimizeTable() may fail to clean up java.sql.ResultSet |
EXPERIMENTAL |
OBL_UNSATISFIED_OBLIGATION |
155 |
Medium |
| org.apache.commons.jcs.auxiliary.disk.jdbc.mysql.MySQLTableOptimizer.repairTable(Statement) may fail to clean up java.sql.ResultSet |
EXPERIMENTAL |
OBL_UNSATISFIED_OBLIGATION |
280 |
Medium |
org.apache.commons.jcs.auxiliary.lateral.LateralCacheNoWaitFacade
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.jcs.auxiliary.lateral.LateralCacheNoWaitFacade(ILateralCacheListener, LateralCacheNoWait[], ILateralCacheAttributes) may expose internal representation by storing an externally mutable object into LateralCacheNoWaitFacade.noWaits |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
83 |
Medium |
org.apache.commons.jcs.auxiliary.remote.CommonRemoteCacheAttributes
| Bug |
Category |
Details |
Line |
Priority |
| Class org.apache.commons.jcs.auxiliary.remote.CommonRemoteCacheAttributes defines non-transient non-serializable instance field location |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
org.apache.commons.jcs.auxiliary.remote.RemoteCacheAttributes
| Bug |
Category |
Details |
Line |
Priority |
| Class org.apache.commons.jcs.auxiliary.remote.RemoteCacheAttributes defines non-transient non-serializable instance field failovers |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet
| Bug |
Category |
Details |
Line |
Priority |
| Class org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet defines non-transient non-serializable instance field serializer |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
| Write to static field org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.cacheMgr from instance method org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.init(ServletConfig) |
STYLE |
ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD |
96 |
Medium |
| Write to static field org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.remoteCacheService from instance method org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.init(ServletConfig) |
STYLE |
ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD |
103 |
Medium |
| Write to static field org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.remoteCacheService from instance method org.apache.commons.jcs.auxiliary.remote.http.server.RemoteHttpCacheServlet.setRemoteCacheService(ICacheServiceNonLocal) |
STYLE |
ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD |
353 |
Medium |
org.apache.commons.jcs.auxiliary.remote.server.RemoteCacheServer
| Bug |
Category |
Details |
Line |
Priority |
| Return value of org.apache.commons.jcs.engine.behavior.ICacheElement.getVal() ignored, but method has no side effect |
STYLE |
RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT |
350 |
Medium |
org.apache.commons.jcs.engine.CacheElementSerialized
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.engine.CacheElementSerialized.getSerializedValue() may expose internal representation by returning CacheElementSerialized.serializedValue |
MALICIOUS_CODE |
EI_EXPOSE_REP |
57 |
Medium |
| new org.apache.commons.jcs.engine.CacheElementSerialized(String, Object, byte[], IElementAttributes) may expose internal representation by storing an externally mutable object into CacheElementSerialized.serializedValue |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
50 |
Medium |
org.apache.commons.jcs.engine.control.CompositeCache
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.jcs.engine.control.CompositeCache.getAuxCaches() may expose internal representation by returning CompositeCache.auxCaches |
MALICIOUS_CODE |
EI_EXPOSE_REP |
205 |
Medium |
| org.apache.commons.jcs.engine.control.CompositeCache.setAuxCaches(AuxiliaryCache[]) may expose internal representation by storing an externally mutable object into CompositeCache.auxCaches |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
195 |
Medium |
org.apache.commons.jcs.engine.control.CompositeCacheManager
| Bug |
Category |
Details |
Line |
Priority |
| Inconsistent synchronization of org.apache.commons.jcs.engine.control.CompositeCacheManager.isConfigured; locked 50% of time |
MT_CORRECTNESS |
IS2_INCONSISTENT_SYNC |
719 |
Medium |
org.apache.commons.jcs.engine.memory.util.SoftReferenceElementDescriptor
| Bug |
Category |
Details |
Line |
Priority |
| Class org.apache.commons.jcs.engine.memory.util.SoftReferenceElementDescriptor defines non-transient non-serializable instance field srce |
BAD_PRACTICE |
SE_BAD_FIELD |
Not available |
Medium |
org.apache.commons.jcs.utils.struct.LRUMap
| Bug |
Category |
Details |
Line |
Priority |
| Unread field: org.apache.commons.jcs.utils.struct.LRUMap.counter |
PERFORMANCE |
URF_UNREAD_FIELD |
38 |
Medium |
|
