Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| OBJ01-J | Medium | Likely | No | No | P6 | L2 |
| OBJ02-J | Medium | Probable | No | No | P4 | L3 |
| OBJ03-J | Low | Probable | Yes | No |
Recommendations
OBJ00-J. Declare data members private
OBJ01-J. Understand how a superclass can affect a subclass
OBJ02-J. Avoid using finalizers
OBJ03-J. Be aware that a final reference may not always refer to immutable data
OBJ04-J. Encapsulate the absence of an object by using a Null Object
OBJ05-J. Write garbage collection friendly code
Rules
OBJ30-J. Do not ignore return values of methods that operate on immutable objects
OBJ31-J. Do not use public static non-final variables
OBJ32-J. Do not allow partially initialized objects to be accessed
OBJ33-J. Limit the extensibility of classes and methods to only trusted subclasses
OBJ34-J. Compare classes and not class names
OBJ35-J. Use checked collections against external code
OBJ36-J. Provide mutable classes with a clone method when passing instances to untrusted code
OBJ37-J. Do not return references to private data
OBJ38-J. Immutable classes must prohibit extension
Risk Assessment Summary
Recommendations
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level | |
|---|---|---|---|---|---|---|
OBJ00- J | medium | likely | medium | P12 | L1 | |
OBJ01- J | medium | probable | high | P4 | L3 | |
OBJ02- J | medium | probable | medium | P8 | L2 | |
OBJ03- J | low | probable | medium | P4 | L3 | |
| OBJ04-J | Low | Likely low | probable No | high No | P2 P3 | L3 |
| OBJ05-J | low High | likely Probable | high Yes | P3 No | L3 P12 |
Rules
L1 | |||||||||||||
| OBJ06 | |||||||||||||
Rule | Severity | Likelihood | Remediation Cost | Priority | Level | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| OBJ30-J | Medium | Probable low | unlikely No | medium No | P2 P4 | L3 OBJ31 | |||||||
| OBJ07-J | Medium | Probable medium | probable No | medium No | P8 P4 | L2 L3 OBJ32 | |||||||
| OBJ08-J | Medium | Probable medium | probable No | medium No | P8 P4 | L2 L3 OBJ33 | |||||||
| OBJ09-J | medium High | likely Unlikely | medium | P12 | L1 | Yes | No | OBJ34- J | medium | unlikely | low | P6 | L2 OBJ35 |
| OBJ10-J | Medium | low Probable | probable Yes | medium No | P4 P8 | L3 L2 OBJ36 | |||||||
| OBJ11-J | High | low Probable | likely Yes | low No | P9 P12 | L2 L1 OBJ37 | |||||||
| OBJ13-J | Medium | high Likely | probable Yes | medium No | P12 | L1 OBJ38 | |||||||
| OBJ14-J | Medium | Likely medium | probable No | low No | P12 P6 | L1 | L2 |
...
FLP32-J. Range check before casting floating point numbers to narrower types The CERT Sun Microsystems Secure Coding Standard for Java OBJ00-J. Declare data members private