SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.6
Threshold is medium
Effort is default
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 614 |
187 |
0 |
0 |
org.apache.commons.collections4.MapUtils
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.MapUtils.getBoolean(Map, Object) has Boolean return type and returns explicit null |
BAD_PRACTICE |
NP_BOOLEAN_RETURN_NULL |
242 |
Medium |
org.apache.commons.collections4.Predicate
| Bug |
Category |
Details |
Line |
Priority |
| The class name org.apache.commons.collections4.Predicate shadows the simple name of implemented interface java.util.function.Predicate |
BAD_PRACTICE |
NM_SAME_SIMPLE_NAME_AS_INTERFACE |
53 |
Medium |
org.apache.commons.collections4.bag.AbstractMapBag
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bag.AbstractMapBag.uniqueSet() may expose internal representation by returning AbstractMapBag.uniqueSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
617 |
Medium |
org.apache.commons.collections4.bidimap.AbstractDualBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.entrySet() may expose internal representation by returning AbstractDualBidiMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
708 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.inverseBidiMap() may expose internal representation by returning AbstractDualBidiMap.inverseBidiMap |
MALICIOUS_CODE |
EI_EXPOSE_REP |
736 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.keySet() may expose internal representation by returning AbstractDualBidiMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
757 |
Medium |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap.values() may expose internal representation by returning AbstractDualBidiMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
835 |
Medium |
org.apache.commons.collections4.bidimap.AbstractDualBidiMap$EntrySetIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.AbstractDualBidiMap$EntrySetIterator.next() may expose internal representation by returning AbstractDualBidiMap$EntrySetIterator.last |
MALICIOUS_CODE |
EI_EXPOSE_REP |
225 |
Medium |
org.apache.commons.collections4.bidimap.TreeBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.bidimap.TreeBidiMap at new org.apache.commons.collections4.bidimap.TreeBidiMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
1017 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.bidimap.TreeBidiMap.doEquals(Object, TreeBidiMap$DataElement) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
1113 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.entrySet() may expose internal representation by returning TreeBidiMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1486 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.inverseBidiMap() may expose internal representation by returning TreeBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1696 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.keySet() may expose internal representation by returning TreeBidiMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1726 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.values() may expose internal representation by returning TreeBidiMap.valuesSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
2212 |
Medium |
| org.apache.commons.collections4.bidimap.TreeBidiMap.equals(Object) is unusual |
STYLE |
EQ_UNUSUAL |
1497 |
Medium |
| Overridable method put is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1973 |
Medium |
| Overridable method readInt is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1969 |
Medium |
org.apache.commons.collections4.bidimap.TreeBidiMap$Inverse
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.TreeBidiMap$Inverse.equals(Object) is unusual |
STYLE |
EQ_UNUSUAL |
294 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableBidiMap.inverseBidiMap() may expose internal representation by returning UnmodifiableBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
94 |
Medium |
| Inconsistent synchronization of org.apache.commons.collections4.bidimap.UnmodifiableBidiMap.inverse; locked 80% of time |
MT_CORRECTNESS |
IS2_INCONSISTENT_SYNC |
92 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableOrderedBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableOrderedBidiMap.inverseOrderedBidiMap() may expose internal representation by returning UnmodifiableOrderedBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
104 |
Medium |
org.apache.commons.collections4.bidimap.UnmodifiableSortedBidiMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bidimap.UnmodifiableSortedBidiMap.inverseBidiMap() may expose internal representation by returning UnmodifiableSortedBidiMap.inverse |
MALICIOUS_CODE |
EI_EXPOSE_REP |
102 |
Medium |
org.apache.commons.collections4.bloomfilter.BitMapExtractor$1Bits
| Bug |
Category |
Details |
Line |
Priority |
| Uncallable method org.apache.commons.collections4.bloomfilter.BitMapExtractor$1Bits.add(long) defined in anonymous class |
CORRECTNESS |
UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS |
105-113 |
Medium |
org.apache.commons.collections4.bloomfilter.CellExtractor$1$CounterCell
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.bloomfilter.CellExtractor$1$CounterCell defines compareTo(CellExtractor$1$CounterCell) and uses Object.equals() |
BAD_PRACTICE |
EQ_COMPARETO_USE_OBJECT_EQUALS |
102 |
Medium |
org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher at new org.apache.commons.collections4.bloomfilter.EnhancedDoubleHasher(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
100 |
Medium |
org.apache.commons.collections4.bloomfilter.IndexExtractor$1Indices
| Bug |
Category |
Details |
Line |
Priority |
| Uncallable method org.apache.commons.collections4.bloomfilter.IndexExtractor$1Indices.add(int) defined in anonymous class |
CORRECTNESS |
UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS |
111-113 |
Medium |
org.apache.commons.collections4.bloomfilter.LayeredBloomFilter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.bloomfilter.LayeredBloomFilter(Shape, LayerManager) may expose internal representation by storing an externally mutable object into LayeredBloomFilter.layerManager |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
97 |
Medium |
org.apache.commons.collections4.bloomfilter.WrappedBloomFilter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.bloomfilter.WrappedBloomFilter(BloomFilter) may expose internal representation by storing an externally mutable object into WrappedBloomFilter.wrapped |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
40 |
Medium |
org.apache.commons.collections4.collection.CompositeCollection
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.collection.CompositeCollection.setMutator(CompositeCollection$CollectionMutator) may expose internal representation by storing an externally mutable object into CompositeCollection.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
433 |
Medium |
org.apache.commons.collections4.collection.IndexedCollection
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.collection.IndexedCollection at new org.apache.commons.collections4.collection.IndexedCollection(Collection, Transformer, MultiMap, boolean) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
112 |
Medium |
| new org.apache.commons.collections4.collection.IndexedCollection(Collection, Transformer, MultiMap, boolean) may expose internal representation by storing an externally mutable object into IndexedCollection.index |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
110 |
Medium |
org.apache.commons.collections4.collection.PredicatedCollection
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.collection.PredicatedCollection at new org.apache.commons.collections4.collection.PredicatedCollection(Collection, Predicate) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
377 |
Medium |
org.apache.commons.collections4.comparators.BooleanComparator
| Bug |
Category |
Details |
Line |
Priority |
| Class (org.apache.commons.collections4.comparators.BooleanComparator) using singleton design pattern has non-private constructor. |
CORRECTNESS |
SING_SINGLETON_HAS_NONPRIVATE_CONSTRUCTOR |
109-110 |
Medium |
| Class (org.apache.commons.collections4.comparators.BooleanComparator) using singleton design pattern directly or indirectly implements Serializable interface. |
CORRECTNESS |
SING_SINGLETON_IMPLEMENTS_SERIALIZABLE |
31-185 |
Medium |
org.apache.commons.collections4.comparators.ComparatorChain
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.comparators.ComparatorChain(List, BitSet) may expose internal representation by storing an externally mutable object into ComparatorChain.comparatorChain |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
130 |
Medium |
| new org.apache.commons.collections4.comparators.ComparatorChain(List, BitSet) may expose internal representation by storing an externally mutable object into ComparatorChain.orderingBits |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
131 |
Medium |
org.apache.commons.collections4.comparators.FixedOrderComparator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.comparators.FixedOrderComparator at new org.apache.commons.collections4.comparators.FixedOrderComparator(List) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
111 |
Medium |
| Exception thrown in class org.apache.commons.collections4.comparators.FixedOrderComparator at new org.apache.commons.collections4.comparators.FixedOrderComparator(Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
126 |
Medium |
org.apache.commons.collections4.functors.InstantiateFactory
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.functors.InstantiateFactory at new org.apache.commons.collections4.functors.InstantiateFactory(Class) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
86 |
Medium |
| Exception thrown in class org.apache.commons.collections4.functors.InstantiateFactory at new org.apache.commons.collections4.functors.InstantiateFactory(Class, Class[], Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
101 |
Medium |
org.apache.commons.collections4.functors.MapTransformer
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.functors.MapTransformer.getMap() may expose internal representation by returning MapTransformer.iMap |
MALICIOUS_CODE |
EI_EXPOSE_REP |
74 |
Medium |
org.apache.commons.collections4.iterators.ArrayIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
60 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
74 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ArrayIterator at new org.apache.commons.collections4.iterators.ArrayIterator(Object, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
94 |
Medium |
org.apache.commons.collections4.iterators.BoundedIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.BoundedIterator at new org.apache.commons.collections4.iterators.BoundedIterator(Iterator, long, long) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
70 |
Medium |
org.apache.commons.collections4.iterators.CollatingIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
70 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
82 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
117 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
98 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Iterator, Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
133 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.CollatingIterator at new org.apache.commons.collections4.iterators.CollatingIterator(Comparator, Iterator[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
149 |
Medium |
org.apache.commons.collections4.iterators.EntrySetMapIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.EntrySetMapIterator(Map) may expose internal representation by storing an externally mutable object into EntrySetMapIterator.map |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
54 |
Medium |
org.apache.commons.collections4.iterators.EnumerationIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.EnumerationIterator(Enumeration, Collection) may expose internal representation by storing an externally mutable object into EnumerationIterator.collection |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
67 |
Medium |
org.apache.commons.collections4.iterators.FilterIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.FilterIterator.getIterator() may expose internal representation by returning FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
84 |
Medium |
| new org.apache.commons.collections4.iterators.FilterIterator(Iterator) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
63 |
Medium |
| new org.apache.commons.collections4.iterators.FilterIterator(Iterator, Predicate) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
74 |
Medium |
| org.apache.commons.collections4.iterators.FilterIterator.setIterator(Iterator) may expose internal representation by storing an externally mutable object into FilterIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
155 |
Medium |
org.apache.commons.collections4.iterators.FilterListIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.FilterListIterator.getListIterator() may expose internal representation by returning FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
135 |
Medium |
| new org.apache.commons.collections4.iterators.FilterListIterator(ListIterator) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
86 |
Medium |
| new org.apache.commons.collections4.iterators.FilterListIterator(ListIterator, Predicate) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
96 |
Medium |
| org.apache.commons.collections4.iterators.FilterListIterator.setListIterator(ListIterator) may expose internal representation by storing an externally mutable object into FilterListIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
212 |
Medium |
org.apache.commons.collections4.iterators.IteratorChain
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
102 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
122 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator, Iterator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
153 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.IteratorChain at new org.apache.commons.collections4.iterators.IteratorChain(Iterator[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
137 |
Medium |
org.apache.commons.collections4.iterators.IteratorEnumeration
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.IteratorEnumeration.getIterator() may expose internal representation by returning IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
57 |
Medium |
| new org.apache.commons.collections4.iterators.IteratorEnumeration(Iterator) may expose internal representation by storing an externally mutable object into IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
48 |
Medium |
| org.apache.commons.collections4.iterators.IteratorEnumeration.setIterator(Iterator) may expose internal representation by storing an externally mutable object into IteratorEnumeration.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
88 |
Medium |
org.apache.commons.collections4.iterators.IteratorIterable
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.IteratorIterable.iterator() may expose internal representation by returning IteratorIterable.typeSafeIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
136 |
Medium |
| new org.apache.commons.collections4.iterators.IteratorIterable(Iterator, boolean) may expose internal representation by storing an externally mutable object into IteratorIterable.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
121 |
Medium |
org.apache.commons.collections4.iterators.ObjectArrayIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
56 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
69 |
Medium |
| Exception thrown in class org.apache.commons.collections4.iterators.ObjectArrayIterator at new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
85 |
Medium |
| org.apache.commons.collections4.iterators.ObjectArrayIterator.getArray() may expose internal representation by returning ObjectArrayIterator.array |
MALICIOUS_CODE |
EI_EXPOSE_REP |
108 |
Medium |
| new org.apache.commons.collections4.iterators.ObjectArrayIterator(Object[], int, int) may expose internal representation by storing an externally mutable object into ObjectArrayIterator.array |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
96 |
Medium |
org.apache.commons.collections4.iterators.ObjectGraphIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.ObjectGraphIterator(Object, Transformer) may expose internal representation by storing an externally mutable object into ObjectGraphIterator.currentIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
113 |
Medium |
| new org.apache.commons.collections4.iterators.ObjectGraphIterator(Iterator) may expose internal representation by storing an externally mutable object into ObjectGraphIterator.currentIterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
132 |
Medium |
org.apache.commons.collections4.iterators.PeekingIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.PeekingIterator(Iterator) may expose internal representation by storing an externally mutable object into PeekingIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
74 |
Medium |
org.apache.commons.collections4.iterators.PushbackIterator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.iterators.PushbackIterator(Iterator) may expose internal representation by storing an externally mutable object into PushbackIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
73 |
Medium |
org.apache.commons.collections4.iterators.SkippingIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.iterators.SkippingIterator at new org.apache.commons.collections4.iterators.SkippingIterator(Iterator, long) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
56 |
Medium |
org.apache.commons.collections4.iterators.TransformIterator
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.iterators.TransformIterator.getIterator() may expose internal representation by returning TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP |
75 |
Medium |
| new org.apache.commons.collections4.iterators.TransformIterator(Iterator) may expose internal representation by storing an externally mutable object into TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
52 |
Medium |
| new org.apache.commons.collections4.iterators.TransformIterator(Iterator, Transformer) may expose internal representation by storing an externally mutable object into TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
65 |
Medium |
| org.apache.commons.collections4.iterators.TransformIterator.setIterator(Iterator) may expose internal representation by storing an externally mutable object into TransformIterator.iterator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
117 |
Medium |
org.apache.commons.collections4.keyvalue.MultiKey
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.keyvalue.MultiKey at new org.apache.commons.collections4.keyvalue.MultiKey(Object, Object, Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
148 |
Medium |
| Exception thrown in class org.apache.commons.collections4.keyvalue.MultiKey at new org.apache.commons.collections4.keyvalue.MultiKey(Object, Object, Object, Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
164 |
Medium |
| Exception thrown in class org.apache.commons.collections4.keyvalue.MultiKey at new org.apache.commons.collections4.keyvalue.MultiKey(Object, Object, Object, Object, Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
181 |
Medium |
org.apache.commons.collections4.keyvalue.TiedMapEntry
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.keyvalue.TiedMapEntry(Map, Object) may expose internal representation by storing an externally mutable object into TiedMapEntry.map |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
54 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList at new org.apache.commons.collections4.list.AbstractLinkedList(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
566 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator at new org.apache.commons.collections4.list.AbstractLinkedList$LinkedListIterator(AbstractLinkedList, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
112 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList at new org.apache.commons.collections4.list.AbstractLinkedList$LinkedSubList(AbstractLinkedList, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
251 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21 at new org.apache.commons.collections4.list.AbstractLinkedListJava21(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
565 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator at new org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedListIterator(AbstractLinkedListJava21, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
115 |
Medium |
org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList at new org.apache.commons.collections4.list.AbstractLinkedListJava21$LinkedSubList(AbstractLinkedListJava21, int, int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
250 |
Medium |
org.apache.commons.collections4.list.AbstractSerializableListDecorator
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method setCollection is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
56 |
Medium |
org.apache.commons.collections4.list.NodeCachingLinkedList
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method doReadObject is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
184 |
Medium |
org.apache.commons.collections4.map.AbstractHashedMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
600 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(int, float) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
615 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.AbstractHashedMap at new org.apache.commons.collections4.map.AbstractHashedMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
649 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.map.AbstractHashedMap.equals(Object) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
1125 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.entrySet() may expose internal representation by returning AbstractHashedMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1078 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.keySet() may expose internal representation by returning AbstractHashedMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1276 |
Medium |
| org.apache.commons.collections4.map.AbstractHashedMap.values() may expose internal representation by returning AbstractHashedMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1501 |
Medium |
| Overridable method init is called from method clone() in class org.apache.commons.collections4.map.AbstractHashedMap. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_CLONE |
771 |
Medium |
org.apache.commons.collections4.map.AbstractHashedMap$HashIterator
| Bug |
Category |
Details |
Line |
Priority |
| Self assignment of field AbstractHashedMap$HashIterator.hashIndex in org.apache.commons.collections4.map.AbstractHashedMap$HashIterator.nextEntry() |
CORRECTNESS |
SA_FIELD_SELF_ASSIGNMENT |
317 |
High |
org.apache.commons.collections4.map.AbstractLinkedMap$LinkEntry
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.AbstractLinkedMap$LinkEntry doesn't override AbstractHashedMap$HashEntry.equals(Object) |
STYLE |
EQ_DOESNT_OVERRIDE_EQUALS |
1 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.AbstractReferenceMap.entrySet() may expose internal representation by returning AbstractHashedMap.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
890 |
Medium |
| org.apache.commons.collections4.map.AbstractReferenceMap.keySet() may expose internal representation by returning AbstractHashedMap.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1003 |
Medium |
| org.apache.commons.collections4.map.AbstractReferenceMap.values() may expose internal representation by returning AbstractHashedMap.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1141 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator
| Bug |
Category |
Details |
Line |
Priority |
| Self assignment of field AbstractReferenceMap$ReferenceBaseIterator.index in org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator.hasNext() |
CORRECTNESS |
SA_FIELD_SELF_ASSIGNMENT |
142 |
High |
| Self assignment of field AbstractReferenceMap$ReferenceBaseIterator.next in org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator.hasNext() |
CORRECTNESS |
SA_FIELD_SELF_ASSIGNMENT |
141 |
High |
| Unread field: org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceBaseIterator.currentValue |
PERFORMANCE |
URF_UNREAD_FIELD |
163 |
Medium |
org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry at new org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry(AbstractReferenceMap, AbstractHashedMap$HashEntry, int, Object, Object) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
214 |
Medium |
| new org.apache.commons.collections4.map.AbstractReferenceMap$ReferenceEntry(AbstractReferenceMap, AbstractHashedMap$HashEntry, int, Object, Object) may expose internal representation by storing an externally mutable object into AbstractReferenceMap$ReferenceEntry.parent |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
213 |
Medium |
org.apache.commons.collections4.map.CompositeMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
132 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map, Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
155 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map, Map, CompositeMap$MapMutator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
167 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
143 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.CompositeMap at new org.apache.commons.collections4.map.CompositeMap(Map[], CompositeMap$MapMutator) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
182 |
Medium |
| new org.apache.commons.collections4.map.CompositeMap(Map[], CompositeMap$MapMutator) may expose internal representation by storing an externally mutable object into CompositeMap.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
179 |
Medium |
| org.apache.commons.collections4.map.CompositeMap.setMutator(CompositeMap$MapMutator) may expose internal representation by storing an externally mutable object into CompositeMap.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
526 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.ConcurrentReferenceHashMap at new org.apache.commons.collections4.map.ConcurrentReferenceHashMap(int, float, int, ConcurrentReferenceHashMap$ReferenceType, ConcurrentReferenceHashMap$ReferenceType, EnumSet) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
1437 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder.setOptions(EnumSet) may expose internal representation by storing an externally mutable object into ConcurrentReferenceHashMap$Builder.options |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
237 |
Medium |
| org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Builder.setSourceMap(Map) may expose internal representation by storing an externally mutable object into ConcurrentReferenceHashMap$Builder.sourceMap |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
248 |
Medium |
org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment
| Bug |
Category |
Details |
Line |
Priority |
| The field org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment.count is transient but isn't set by deserialization |
BAD_PRACTICE |
SE_TRANSIENT_FIELD_NOT_RESTORED |
Not available |
Medium |
| The field org.apache.commons.collections4.map.ConcurrentReferenceHashMap$Segment.modCount is transient but isn't set by deserialization |
BAD_PRACTICE |
SE_TRANSIENT_FIELD_NOT_RESTORED |
Not available |
Medium |
org.apache.commons.collections4.map.EntrySetToMapIteratorAdapter
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.map.EntrySetToMapIteratorAdapter(Set) may expose internal representation by storing an externally mutable object into EntrySetToMapIteratorAdapter.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
49 |
Medium |
org.apache.commons.collections4.map.Flat3Map
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.Flat3Map at new org.apache.commons.collections4.map.Flat3Map(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
559 |
Medium |
| Overridable method createDelegateMap is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1045 |
Medium |
| Overridable method put is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1048 |
Medium |
| Overridable method readInt is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
1043 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.convertToMap() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
697-699 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.hashCode() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
862-864 |
Medium |
| Switch statement found in org.apache.commons.collections4.map.Flat3Map.toString() where one case falls through to the next case |
STYLE |
SF_SWITCH_FALLTHROUGH |
1234-1236 |
Medium |
org.apache.commons.collections4.map.LRUMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, float, boolean) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
132 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, int, float) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
161 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.LRUMap at new org.apache.commons.collections4.map.LRUMap(int, int, float, boolean) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
183 |
Medium |
| Do not catch NullPointerException like in org.apache.commons.collections4.map.LRUMap.reuseMapping(AbstractLinkedMap$LinkEntry, int, int, Object, Object) |
STYLE |
DCN_NULLPOINTER_EXCEPTION |
504 |
Medium |
| Overridable method doReadObject is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
421 |
Medium |
org.apache.commons.collections4.map.MultiValueMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.MultiValueMap at new org.apache.commons.collections4.map.MultiValueMap() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
235 |
Medium |
| Exception thrown in class org.apache.commons.collections4.map.MultiValueMap at new org.apache.commons.collections4.map.MultiValueMap(Map, Factory) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
251 |
Medium |
org.apache.commons.collections4.map.SingletonMap
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.map.SingletonMap at new org.apache.commons.collections4.map.SingletonMap(Map) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
242 |
Medium |
org.apache.commons.collections4.multimap.AbstractMultiValuedMap
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.multimap.AbstractMultiValuedMap.keys() may expose internal representation by returning AbstractMultiValuedMap.keysMultiSetView |
MALICIOUS_CODE |
EI_EXPOSE_REP |
729 |
Medium |
org.apache.commons.collections4.multiset.AbstractMultiSet
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.multiset.AbstractMultiSet.entrySet() may expose internal representation by returning AbstractMultiSet.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
360 |
Medium |
| org.apache.commons.collections4.multiset.AbstractMultiSet.uniqueSet() may expose internal representation by returning AbstractMultiSet.uniqueSet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
493 |
Medium |
org.apache.commons.collections4.properties.OrderedProperties
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.properties.OrderedProperties.keySet() may expose internal representation by returning OrderedProperties.orderedKeys |
MALICIOUS_CODE |
EI_EXPOSE_REP |
93 |
Medium |
| org.apache.commons.collections4.properties.OrderedProperties doesn't override java.util.Properties.equals(Object) |
STYLE |
EQ_DOESNT_OVERRIDE_EQUALS |
1 |
Medium |
org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties.getProperty(String, String) is unsynchronized, org.apache.commons.collections4.properties.PropertiesFactory$EmptyProperties.setProperty(String, String) is synchronized |
MT_CORRECTNESS |
UG_SYNC_SET_UNSYNC_GET |
127 |
Medium |
org.apache.commons.collections4.queue.CircularFifoQueue
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
84 |
Medium |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue(int) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
108 |
Medium |
| Exception thrown in class org.apache.commons.collections4.queue.CircularFifoQueue at new org.apache.commons.collections4.queue.CircularFifoQueue(Collection) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
95 |
Medium |
| Overridable method readInt is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
362 |
Medium |
org.apache.commons.collections4.sequence.SequencesComparator
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.sequence.SequencesComparator(List, List, Equator) may expose internal representation by storing an externally mutable object into SequencesComparator.sequence1 |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
164 |
Medium |
| new org.apache.commons.collections4.sequence.SequencesComparator(List, List, Equator) may expose internal representation by storing an externally mutable object into SequencesComparator.sequence2 |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
165 |
Medium |
org.apache.commons.collections4.set.AbstractSerializableSetDecorator
| Bug |
Category |
Details |
Line |
Priority |
| Overridable method setCollection is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
57 |
Medium |
org.apache.commons.collections4.set.CompositeSet
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class org.apache.commons.collections4.set.CompositeSet at new org.apache.commons.collections4.set.CompositeSet(Set) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
131 |
Medium |
| Exception thrown in class org.apache.commons.collections4.set.CompositeSet at new org.apache.commons.collections4.set.CompositeSet(Set[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
140 |
Medium |
| org.apache.commons.collections4.set.CompositeSet.setMutator(CompositeSet$SetMutator) may expose internal representation by storing an externally mutable object into CompositeSet.mutator |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
457 |
Medium |
org.apache.commons.collections4.trie.AbstractPatriciaTrie
| Bug |
Category |
Details |
Line |
Priority |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.entrySet() may expose internal representation by returning AbstractPatriciaTrie.entrySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1431 |
Medium |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.keySet() may expose internal representation by returning AbstractPatriciaTrie.keySet |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1705 |
Medium |
| org.apache.commons.collections4.trie.AbstractPatriciaTrie.values() may expose internal representation by returning AbstractPatriciaTrie.values |
MALICIOUS_CODE |
EI_EXPOSE_REP |
2444 |
Medium |
| Overridable method put is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
2086 |
Medium |
| Overridable method readInt is called from readObject. |
MALICIOUS_CODE |
MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT |
2082 |
Medium |
org.apache.commons.collections4.trie.AbstractPatriciaTrie$PrefixRangeMap
| Bug |
Category |
Details |
Line |
Priority |
| Potentially ambiguous invocation of either an outer or inherited method java.util.AbstractMap.keySet() in org.apache.commons.collections4.trie.AbstractPatriciaTrie$PrefixRangeMap.clear() |
STYLE |
IA_AMBIGUOUS_INVOCATION_OF_INHERITED_OR_OUTER_METHOD |
562 |
High |
org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry
| Bug |
Category |
Details |
Line |
Priority |
| new org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry(Object, Object, int) may expose internal representation by storing an externally mutable object into AbstractPatriciaTrie$TrieEntry.left |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1010 |
Medium |
| new org.apache.commons.collections4.trie.AbstractPatriciaTrie$TrieEntry(Object, Object, int) may expose internal representation by storing an externally mutable object into AbstractPatriciaTrie$TrieEntry.predecessor |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1012 |
Medium |
|
