Page Information

Title:	OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
Author:	Dhruv Mohindra	Jul 08, 2008
Last Changed by:	David Svoboda	Aug 06, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/1TdGBQ
Export As:	Word · PDF

SEI CERT Oracle Coding Standard for Java (4)     Page: OBJ05-J. Do not return references to private mutable class members     Page: OBJ03-J. Prevent heap pollution     Page: OBJ06-J. Defensively copy mutable inputs and mutable internal components     Page: OBJ07-J. Sensitive classes must not let themselves be copied

Parent Page     Page: Rule 05. Object Orientation (OBJ)

• draft
• android-applicable
• exportable-c++
• rule
• analyzable
• obj

Time	Editor
Aug 06, 2025 10:33	Amy Gale	View Changes
REM cost reform
Mar 10, 2025 21:35	Amy Gale	View Changes
Delete stale CodeSonar entry
Mar 05, 2025 11:33	Jill Britton	View Changes
Feb 14, 2025 15:51	David Svoboda	View Changes
May 18, 2021 08:42	Michal Rozenau
Parasoft Jtest 2021.1

External Links (8)
    cwe.mitre.org/data/definitions/374.html
    cwe.mitre.org/
    www.oracle.com/technetwork/java/seccodeguide-139067.html
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    docs.oracle.com/javase/8/docs/api/
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    cwe.mitre.org/data/definitions/375.html

SEI CERT Oracle Coding Standard for Java (11)     Page: Rule BB. Glossary     Page: Rule AA. References     Page: OBJ05-J. Do not return references to private mutable class members     Page: Klocwork_V     Page: Klocwork     Page: OBJ06-J. Defensively copy mutable inputs and mutable internal components     Page: Coverity     Page: Parasoft_V     Page: Parasoft     Home page: SEI CERT Oracle Coding Standard for Java     Page: OBJ07-J. Sensitive classes must not let themselves be copied