SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: FIO05-J. Do not expose buffers or their backing arrays methods to untrusted code  
Author: Dhruv Mohindra Sep 14, 2009
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/ZjdGBQ
Export As: Word · PDF  
Hierarchy
Parent Page
    Page: Rule 13. Input Output (FIO)
Labels
Global Labels (6)
Recent Changes
Time Editor  
Aug 06, 2025 18:00 Winfried Gerlach View Changes
REM cost reform
Aug 06, 2025 16:54 David Svoboda View Changes
REM cost reform
Jan 25, 2022 03:10 Winfried Gerlach View Changes
Jan 24, 2022 11:22 Winfried Gerlach View Changes
May 18, 2021 07:55 Michal Rozenau  
Outgoing Links
External Links (3)
    https://docs.oracle.com/javase/8/docs/api/java/nio/ByteBuff…
    https://docs.oracle.com/javase/8/docs/api/java/nio/CharBuff…
    https://docs.oracle.com/javase/8/docs/api/java/nio/IntBuffe…
SEI CERT Oracle Coding Standard for Java (11)     Page: Parasoft_V
    Page: SpotBugs
    Page: FIO06-J. Do not create multiple buffered wrappers on a single byte or character stream
    Page: Parasoft
    Home page: SEI CERT Oracle Coding Standard for Java
    Page: Rule AA. References
    Page: FIO04-J. Release resources when they are no longer needed
    Page: Rule BB. Glossary
    Page: Rule 13. Input Output (FIO)
    Page: SpotBugs_V
    Page: OBJ06-J. Defensively copy mutable inputs and mutable internal components