SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Title: LCK00-J. Use private final lock objects to synchronize classes that may interact with untrusted code  
Author: Fei He Nov 05, 2009
Last Changed by: David Svoboda Aug 06, 2025
Tiny Link: (useful for email) https://wiki.sei.cmu.edu/confluence/x/djdGBQ
Export As: Word · PDF  
Incoming Links
SEI CERT Oracle Coding Standard for Java (11)
    Page: LCK05-J. Synchronize access to static fields that can be modified by untrusted code
    Page: TSM00-J. Do not override thread-safe methods with methods that are not thread-safe
    Page: MSC11-J. Do not let session information leak within a servlet
    Page: LCK01-J. Do not synchronize on objects that may be reused
    Page: LCK06-J. Do not use an instance lock to protect shared static data
    Page: VNA02-J. Ensure that compound operations on shared variables are atomic
    Page: LCK02-J. Do not synchronize on the class object returned by getClass()
    Page: SER11-J. Prevent overwriting of externalizable objects
    Page: TSM03-J. Do not publish partially initialized objects
    Page: VNA00-J. Ensure visibility when accessing shared primitive variables
    Page: LCK11-J. Avoid client-side locking when using classes that do not commit to their locking strategy
SEI CERT C Coding Standard (1)
    Page: CON03-C. Ensure visibility when accessing shared variables
Hierarchy
Parent Page
    Page: Rule 09. Locking (LCK)
Labels
Global Labels (6)
Recent Changes
Time Editor  
Aug 06, 2025 16:40 Amy Gale View Changes
REM cost reform
Mar 10, 2025 21:45 Amy Gale View Changes
Localize CodeSonar crossreferences to Java scope
Feb 14, 2025 15:51 David Svoboda View Changes
Aug 06, 2021 09:03 Jon O'Donnell View Changes
May 18, 2021 08:03 Michal Rozenau  
Parasoft Jtest 2021.1
Outgoing Links
External Links (4)
    cwe.mitre.org/data/definitions/413.html
    cwe.mitre.org/
    https://www.sonarsource.com/products/codeanalyzers/sonarjav…
    cwe.mitre.org/data/definitions/412.html
SEI CERT Oracle Coding Standard for Java (16)     Page: TSM00-J. Do not override thread-safe methods with methods that are not thread-safe
    Page: Rule AA. References
    Page: CodeSonar
    Page: LCK05-J. Synchronize access to static fields that can be modified by untrusted code
    Page: LCK09-J. Do not perform operations that can block while holding a lock
    Page: The Checker Framework
    Page: Parasoft_V
    Page: Rule 09. Locking (LCK)
    Page: CodeSonar_V
    Page: SonarQube_V
    Page: OBJ01-J. Limit accessibility of fields
    Page: SonarQube
    Page: The Checker Framework_V
    Home page: SEI CERT Oracle Coding Standard for Java
    Page: LCK01-J. Do not synchronize on objects that may be reused
    Page: Parasoft