Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Guidelines
FIO00-J. Defensively copy mutable inputs and mutable internal components
FIO01-J. Do not expose buffers created using the wrap() or duplicate() methods to untrusted code
FIO02-J. Keep track of bytes read and account for character encoding while reading data
FIO03-J. Specify the character encoding while performing file or network IO
FIO04-J. Canonicalize path names before validating
FIO05-J. Do not create multiple buffered wrappers on an InputStream
FIO06-J. Ensure all resources are properly closed when they are no longer needed
FIO07-J. Do not create temporary files in shared directories
FIO08-J. Do not log sensitive information
FIO09-J. Exclude user input from format strings
FIO10-J. Do not let Runtime.exec() fail or block indefinitely
FIO11-J. Do not attempt to read raw binary data as character data
Risk Assessment Summary
Recommendations
Guideline Rule | Severity | Likelihood | Detectable | Repairable Remediation Cost | Priority | Level | |||
|---|---|---|---|---|---|---|---|---|---|
| FIO00-J | Medium | medium Unlikely | probable No | high No | P4 P2 | L3 | |||
| FIO01-J | Medium | medium Probable | likely No | low No | P18 P4 | L1 L3 | |||
| FIO02-J | Medium | Probable low | unlikely Yes | medium Yes | P2 P12 | L3 L1 | |||
| FIO03-J | Medium | low Probable | unlikely No | medium No | P2 P4 | L3 | |||
| FIO04-J | Low | medium Probable | unlikely Yes | medium No | P4 | L3 | |||
| FIO05-J | Medium | low Likely | unlikely No | medium No | P2 P6 | L3 L2 | |||
| FIO06-J | Low | Unlikely low | probable No | medium No | P4 P1 | L3 | |||
| FIO07-J | Low | Probable high | probable Yes | medium No | P12 P4 | L1 L3 | |||
| FIO08-J | High | Probable medium | probable Yes | high Yes | P4 P18 | L3 L1 | |||
| FIO09-J | Low | medium Unlikely | unlikely No | medium Yes | P4 P2 | L3 | |||
| FIO10-J | Low | Unlikely | No | No | P1 | L3 | |||
| FIO12-J | Low | Unlikely | No | No | P1 | L3 | |||
| FIO13-J | Medium | Probable | No | No | low | probable | medium | P4 | L3 |
| FIO14-J | Medium | Likely | No | No | P6 | L2 | |||
| FIO16-J | Medium | Unlikely | No | No | P2 | L3 |
...
OBJ15-J. Ensure that keys used in comparison operations cannot be changed The CERT Oracle Secure Coding Standard for Java FIO00-J. Defensively copy mutable inputs and mutable internal components