SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: OBJ05-J. Do not return references to private mutable class members  
Author: Dhruv Mohindra Mar 10, 2009
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/OTdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (5)
    Page: OBJ56-J. Provide sensitive mutable classes with unmodifiable wrappers
    Page: OBJ06-J. Defensively copy mutable inputs and mutable internal components
    Page: OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
    Page: OBJ01-J. Limit accessibility of fields
    Page: OBJ13-J. Ensure that references to mutable objects are not exposed
Hierarchy
Parent Page
    Page: Rule 05. Object Orientation (OBJ)
Labels
Global Labels (6)
Recent Changes
Time Editor  
Aug 06, 2025 10:33 Jill Britton View Changes
REM cost reform
Mar 05, 2025 11:34 Jill Britton View Changes
May 18, 2021 08:42 Michal Rozenau View Changes
Parasoft Jtest 2021.1
Feb 26, 2021 09:00 Michal Rozenau View Changes
Parasoft Jtest 2020.2
Jan 03, 2019 03:58 Alexandre GIGLEUX  
Outgoing Links
External Links (6)
    https://rules.sonarsource.com/java/RSPEC-2384
    https://www.securecoding.cert.org/confluence/display/java/R…
    cwe.mitre.org/
    www.informit.com/articles/article.aspx?p=20530
    cwe.mitre.org/data/definitions/375.html
    docs.oracle.com/javase/8/docs/api/
SEI CERT Oracle Coding Standard for Java (14)     Page: OBJ06-J. Defensively copy mutable inputs and mutable internal components
    Page: OBJ07-J. Sensitive classes must not let themselves be copied
    Page: OBJ13-J. Ensure that references to mutable objects are not exposed
    Page: Parasoft
    Page: Klocwork
    Page: Rule AA. References
    Page: SonarQube_V
    Page: Rule 05. Object Orientation (OBJ)
    Page: Parasoft_V
    Page: Klocwork_V
    Home page: SEI CERT Oracle Coding Standard for Java
    Page: SonarQube
    Page: OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
    Page: Rule BB. Glossary
SEI CERT C++ Coding Standard (2)     Home page: SEI CERT C++ Coding Standard
    Page: VOID OOP08-CPP. Do not return references to private data