...
The Java language system weakens the accessibility of private members of an outer class when a nested inner class is present, which can result in an information leak.
Rule | Severity | Likelihood | Detectable | RepairableRemediation Cost | Priority | Level |
|---|---|---|---|---|---|---|
OBJ08-J | Medium | Probable | No | NoMedium | P8P4 | L2L3 |
Automated Detection
Automated detection of nonprivate inner classes that define nonprivate members and constructors that leak private data from the outer class is straightforward.
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| JAVA.CLASS.ICSBS | Inner Class Should be Static (Java)class should be static | ||||||
| Parasoft Jtest |
| CERT.OBJ08.INNER | Make all member classes "private" |
...