SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.6
Threshold is medium
Effort is default
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 46 |
26 |
0 |
0 |
net.sf.michaelo.tomcat.authenticator.GSSAuthenticatorBase
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.authenticator.GSSAuthenticatorBase at new net.sf.michaelo.tomcat.authenticator.GSSAuthenticatorBase() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
38 |
Medium |
net.sf.michaelo.tomcat.pac.KerbValidationInfo
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.KerbValidationInfo at new net.sf.michaelo.tomcat.pac.KerbValidationInfo(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
40 |
Medium |
| Check for oddness that won't work for negative numbers in net.sf.michaelo.tomcat.pac.KerbValidationInfo.getRpcUnicodeString(PacDataBuffer) |
STYLE |
IM_BAD_CHECK_FOR_ODD |
360 |
Medium |
net.sf.michaelo.tomcat.pac.Krb5AuthzDataDumpPrinter
| Bug |
Category |
Details |
Line |
Priority |
| Switch statement found in net.sf.michaelo.tomcat.pac.Krb5AuthzDataDumpPrinter.dumpFile(Path, String, KerberosKey[]) where default case is missing |
STYLE |
SF_SWITCH_NO_DEFAULT |
207-219 |
Medium |
net.sf.michaelo.tomcat.pac.Pac
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.Pac at new net.sf.michaelo.tomcat.pac.Pac(byte[], PacSignatureVerifier) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
51 |
Medium |
net.sf.michaelo.tomcat.pac.PacClientInfo
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.PacClientInfo at new net.sf.michaelo.tomcat.pac.PacClientInfo(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
39 |
Medium |
net.sf.michaelo.tomcat.pac.PacInfoBuffer
| Bug |
Category |
Details |
Line |
Priority |
| net.sf.michaelo.tomcat.pac.PacInfoBuffer.getData() may expose internal representation by returning PacInfoBuffer.data |
MALICIOUS_CODE |
EI_EXPOSE_REP |
53 |
Medium |
| new net.sf.michaelo.tomcat.pac.PacInfoBuffer(long, long, BigInteger, byte[]) may expose internal representation by storing an externally mutable object into PacInfoBuffer.data |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
37 |
Medium |
net.sf.michaelo.tomcat.pac.PacSignatureData
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.PacSignatureData at new net.sf.michaelo.tomcat.pac.PacSignatureData(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
68 |
Medium |
| net.sf.michaelo.tomcat.pac.PacSignatureData.getSignature() may expose internal representation by returning PacSignatureData.signature |
MALICIOUS_CODE |
EI_EXPOSE_REP |
96 |
Medium |
net.sf.michaelo.tomcat.pac.RpcUnicodeString
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.RpcUnicodeString at new net.sf.michaelo.tomcat.pac.RpcUnicodeString(long, long, long) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
36 |
Medium |
net.sf.michaelo.tomcat.pac.UpnDnsInfo
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.pac.UpnDnsInfo at new net.sf.michaelo.tomcat.pac.UpnDnsInfo(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
50 |
Medium |
| Dead store to pos in new net.sf.michaelo.tomcat.pac.UpnDnsInfo(byte[]) |
STYLE |
DLS_DEAD_LOCAL_STORE |
89 |
Medium |
net.sf.michaelo.tomcat.realm.ActiveDirectoryPrincipal
| Bug |
Category |
Details |
Line |
Priority |
| net.sf.michaelo.tomcat.realm.ActiveDirectoryPrincipal.getAdditionalAttributes() may expose internal representation by returning ActiveDirectoryPrincipal.additionalAttributes |
MALICIOUS_CODE |
EI_EXPOSE_REP |
148 |
Medium |
| net.sf.michaelo.tomcat.realm.ActiveDirectoryPrincipal.getGssCredential() may expose internal representation by returning ActiveDirectoryPrincipal.gssCredential |
MALICIOUS_CODE |
EI_EXPOSE_REP |
107 |
Medium |
| new net.sf.michaelo.tomcat.realm.ActiveDirectoryPrincipal(GSSName, Sid, List, GSSCredential, Map) may expose internal representation by storing an externally mutable object into ActiveDirectoryPrincipal.gssCredential |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
71 |
Medium |
net.sf.michaelo.tomcat.realm.ActiveDirectoryRealm$User
| Bug |
Category |
Details |
Line |
Priority |
| net.sf.michaelo.tomcat.realm.ActiveDirectoryRealm$User.getAdditionalAttributes() may expose internal representation by returning ActiveDirectoryRealm$User.additionalAttributes |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1072 |
Medium |
| net.sf.michaelo.tomcat.realm.ActiveDirectoryRealm$User.getRoles() may expose internal representation by returning ActiveDirectoryRealm$User.roles |
MALICIOUS_CODE |
EI_EXPOSE_REP |
1068 |
Medium |
| new net.sf.michaelo.tomcat.realm.ActiveDirectoryRealm$User(GSSName, Sid, List, Map) may expose internal representation by storing an externally mutable object into ActiveDirectoryRealm$User.additionalAttributes |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1056 |
Medium |
| new net.sf.michaelo.tomcat.realm.ActiveDirectoryRealm$User(GSSName, Sid, List, Map) may expose internal representation by storing an externally mutable object into ActiveDirectoryRealm$User.roles |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
1055 |
Medium |
net.sf.michaelo.tomcat.realm.ActiveDirectoryRealmBase
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.realm.ActiveDirectoryRealmBase at new net.sf.michaelo.tomcat.realm.ActiveDirectoryRealmBase() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
34 |
Medium |
net.sf.michaelo.tomcat.realm.Sid
| Bug |
Category |
Details |
Line |
Priority |
| Exception thrown in class net.sf.michaelo.tomcat.realm.Sid at new net.sf.michaelo.tomcat.realm.Sid(byte[]) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. |
BAD_PRACTICE |
CT_CONSTRUCTOR_THROW |
79 |
Medium |
net.sf.michaelo.tomcat.realm.asn1.OtherNameParseResult
| Bug |
Category |
Details |
Line |
Priority |
| net.sf.michaelo.tomcat.realm.asn1.OtherNameParseResult.getTypeId() may expose internal representation by returning OtherNameParseResult.typeId |
MALICIOUS_CODE |
EI_EXPOSE_REP |
35 |
Medium |
| net.sf.michaelo.tomcat.realm.asn1.OtherNameParseResult.getValue() may expose internal representation by returning OtherNameParseResult.value |
MALICIOUS_CODE |
EI_EXPOSE_REP |
44 |
Medium |
| new net.sf.michaelo.tomcat.realm.asn1.OtherNameParseResult(byte[], byte[]) may expose internal representation by storing an externally mutable object into OtherNameParseResult.typeId |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
25 |
Medium |
| new net.sf.michaelo.tomcat.realm.asn1.OtherNameParseResult(byte[], byte[]) may expose internal representation by storing an externally mutable object into OtherNameParseResult.value |
MALICIOUS_CODE |
EI_EXPOSE_REP2 |
26 |
Medium |
Apache Maven