SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: OBJ06-J. Defensively copy mutable inputs and mutable internal components  
Author: Dhruv Mohindra Jul 02, 2008
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/HTdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (7)
    Page: OBJ05-J. Do not return references to private mutable class members
    Page: VNA04-J. Ensure that calls to chained methods are atomic
    Page: OBJ07-J. Sensitive classes must not let themselves be copied
    Page: SEC02-J. Do not base security checks on untrusted sources
    Page: OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
    Page: SER06-J. Make defensive copies of private mutable components during deserialization
    Page: FIO05-J. Do not expose buffers or their backing arrays methods to untrusted code
Hierarchy
Parent Page
    Page: Rule 05. Object Orientation (OBJ)
Labels
Global Labels (8)
Recent Changes
Time Editor  
Aug 06, 2025 10:34 David Svoboda View Changes
REM cost reform
May 18, 2021 08:43 Michal Rozenau View Changes
Parasoft Jtest 2021.1
Mar 31, 2021 13:37 Jon O'Donnell View Changes
Feb 26, 2021 09:01 Michal Rozenau View Changes
Parasoft Jtest 2020.2
Jan 03, 2019 03:59 Alexandre GIGLEUX  
Outgoing Links
External Links (6)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-050…
    https://rules.sonarsource.com/java/RSPEC-2384
    www.oracle.com/technetwork/java/seccodeguide-139067.html
SEI CERT Oracle Coding Standard for Java (10)     Home page: SEI CERT Oracle Coding Standard for Java
    Page: Parasoft_V
    Page: Rule AA. References
    Page: SonarQube_V
    Page: Parasoft
    Page: OBJ05-J. Do not return references to private mutable class members
    Page: SonarQube
    Page: SER07-J. Do not use the default serialized form for classes with implementation-defined invariants
    Page: OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
    Page: Rule BB. Glossary