Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable | Priority | Level |
|---|---|---|---|---|---|---|
| OBJ01-J | Medium | Likely | No | No | P6 | L2 |
| OBJ02-J | Medium | Probable | No | No | P4 |
Guidelines
OBJ00-J. Declare data members as private and provide accessible wrapper methods
OBJ01-J. Be aware that a final reference may not always refer to immutable data
OBJ02-J. Do not ignore return values of methods that operate on immutable objects
OBJ03-J. Do not use public static non-final variables
OBJ04-J. Do not allow access to partially initialized objects
OBJ05-J. Limit the extensibility of non-final classes and methods to trusted subclasses only
OBJ06-J. Compare classes and not class names
OBJ07-J. Understand how a superclass can affect a subclass
OBJ08-J. Avoid using finalizers
OBJ09-J. Immutable classes must prohibit extension
OBJ11-J. Defensively copy private mutable class members before returning their references
OBJ12-J. Use checked collections against external code
OBJ13-J. Write garbage collection friendly code
OBJ14-J. Encapsulate the absence of an object by using a Null Object
OBJ15-J. Ensure that keys used in comparison operations cannot be changed
Risk Assessment Summary
Recommendations
Guideline | Severity | Likelihood | Remediation Cost | Priority | Level | |
|---|---|---|---|---|---|---|
OBJ00-J | medium | likely | medium | P12 | L1 | |
OBJ01-J | low | probable | medium | P4 | L3 | |
OBJ02-J | low | unlikely | medium | P2 | L3 | |
| OBJ03-J | Low | Probable medium | probable Yes | medium No | P8 P4 | L2 L3 |
| OBJ04-J | Low | high Likely | probable No | medium No | P12 P3 | L1 L3 |
| OBJ05-J | High | medium Probable | likely Yes | medium No | P12 | L1 |
| OBJ06-J | Medium | Probable medium | unlikely No | low No | P6 P4 | L2 L3 |
| OBJ07-J | Medium | medium Probable | probable No | high No | P4 | L3 |
| OBJ08-J | Medium | medium Probable | probable No | medium No | P8 P4 | L2 L3 |
| OBJ09-J | High | Unlikely medium | probable Yes | low No | P12 P6 | L1 L2 |
| OBJ10-J | Medium | low Probable | likely Yes | medium No | P6 P8 | L2 |
| OBJ11-J | High | high Probable | probable Yes | medium No | P12 | L1 OBJ12 |
| OBJ13-J | low Medium | probable Likely | medium Yes | P4 No | L3 | |
OBJ13-J | low | likely | high | P3 | L3 | |
P12 | L1 | |||||
| OBJ14-J | low Medium | probable Likely | high No | P2 No | L3 P6 | |
OBJ15-J | low | probable | high | P2 | L3 | |
L2 |
...
FLP09-J. Do not rely on the default string representation of floating point values The CERT Oracle Secure Coding Standard for Java OBJ00-J. Declare data members as private and provide accessible wrapper methods