| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Value annotated as carrying a type qualifier used where a value that must not carry that qualifier is required |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Multithreaded correctness - Synchronization on field in futile attempt to guard that field |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Multithreaded correctness - Using notify() rather than notifyAll() |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Fields of immutable classes should be final |
Severity set to MINOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Exception is caught when Exception is not thrown |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Redundant nullcheck of value known to be non-null |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Absolute path traversal in servlet |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Malicious code vulnerability - Field should be package protected |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Classloaders should only be created inside doPrivileged block |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Useless control flow to next line |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Method directly allocates a specific implementation of xml interfaces |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - equals() method does not check for null argument |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Performance - Could be refactored into a named static inner class |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Performance - Method invokes inefficient new String() constructor |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Security - HTTP Response splitting vulnerability |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Reversed method arguments |
Severity set to MINOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Uninitialized read of field in constructor |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Security - Hardcoded constant database password |
Severity set to BLOCKER
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad comparison of int value with long constant |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - No previous argument for format string |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Read of unwritten field |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
compareTo()/compare() returns Integer.MIN_VALUE |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Using pointer equality to compare different types |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Method ignores results of InputStream.skip() |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Finalizer does nothing but call superclass finalizer |
Severity set to MINOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Method ignores results of InputStream.read() |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Signature declares use of unhashable class in hashed construct |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Multithreaded correctness - Class's readObject() method is synchronized |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Uncallable method defined in anonymous class |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Method ignores return value |
Severity set to MINOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Method attempts to access a prepared statement parameter with index 0 |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Unusual equals method |
Severity set to MINOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Non-Boolean argument formatted using %b format specifier |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - serialVersionUID isn't static |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Value is null and guaranteed to be dereferenced on exception path |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Exception created and dropped rather than thrown |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - equals method overrides equals in superclass and may not be symmetric |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Multithreaded correctness - Condition.await() not in loop |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Malicious code vulnerability - May expose internal representation by incorporating reference to mutable object |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Self comparison of field with itself |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Security - HTTP cookie formed from untrusted input |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Correctness - Null value is guaranteed to be dereferenced |
Severity set to BLOCKER
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Class names shouldn't shadow simple name of superclass |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - Immediate dereference of the result of readLine() |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Finalizer nullifies superclass finalizer |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Equals method should not assume anything about the type of its argument |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Dodgy - private readResolve method not inherited by subclasses |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Multithreaded correctness - Mutable servlet field |
Severity set to MAJOR
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Performance - Method calls static Math class method on a constant value |
Severity set to CRITICAL
|
| Feb 22, 2015 6:39 PM |
System |
Activated |
Bad practice - Class implements Cloneable but does not define or use clone method |
Severity set to MAJOR
|
