04. Object Orientation (OBJ)

Created by Fred Long, last updated by Robert Seacord on Mar 03, 2011 1 minute read

You are viewing an old version of this page. View the current version.

Guidelines

Page:

OBJ01-J. Limit accessibility of fields
Page:

OBJ02-J. Preserve dependencies in subclasses when changing superclasses
Page:

OBJ03-J. Prevent heap pollution
Page:

OBJ04-J. Provide mutable classes with copy functionality to safely allow passing instances to untrusted code
Page:

OBJ05-J. Do not return references to private mutable class members
Page:

OBJ06-J. Defensively copy mutable inputs and mutable internal components
Page:

OBJ07-J. Sensitive classes must not let themselves be copied
Page:

OBJ08-J. Do not expose private members of an outer class from within a nested class
Page:

OBJ09-J. Compare classes and not class names
Page:

OBJ10-J. Do not use public static nonfinal fields
Page:

OBJ11-J. Be wary of letting constructors throw exceptions
Page:

OBJ12-J. Respect object-based annotations
Page:

OBJ13-J. Ensure that references to mutable objects are not exposed
Page:

OBJ14-J. Do not use an object that has been freed.
Page:

OBJ50-J. Never confuse the immutability of a reference with that of the referenced object
Page:

OBJ51-J. Minimize the accessibility of classes and their members
Page:

OBJ52-J. Write garbage-collection-friendly code
Page:

OBJ53-J. Do not use direct buffers for short-lived, infrequently used objects
Page:

OBJ54-J. Do not attempt to help the garbage collector by setting local reference variables to null
Page:

OBJ55-J. Remove short-lived objects from long-lived container objects
Page:

OBJ56-J. Provide sensitive mutable classes with unmodifiable wrappers
Page:

OBJ57-J. Do not rely on methods that can be overridden by untrusted code
Page:

OBJ58-J. Limit the extensibility of classes and methods with invariants
Page:

Rec. 05. Object Orientation (OBJ)
Page:

Rule 05. Object Orientation (OBJ)

Risk Assessment Summary

Recommendations

Guideline	Severity	Likelihood	Remediation Cost	Priority	Level
OBJ00-J	medium	likely	medium	P12	L1
OBJ01-J	low	probable	medium	P4	L3
OBJ03-J	medium	probable	medium	P8	L2
OBJ04-J	high	probable	medium	P12	L1
OBJ05-J	medium	likely	medium	P12	L1
OBJ06-J	high	unlikely	low	P9	L2
OBJ07-J	medium	probable	high	P4	L3
OBJ09-J	medium	probable	low	P12	L1
OBJ10-J	low	likely	medium	P6	L2
OBJ11-J	high	probable	medium	P12	L1
OBJ12-J	low	probable	medium	P4	L3
OBJ13-J	low	likely	high	P3	L3
OBJ14-J	low	probable	high	P2	L3
OBJ16-J	medium	probable	medium	P8	L2
OBJ17-J	medium	probable	medium	P8	L2

NUM14-J. Do not rely on the default string representation of floating point values The CERT Oracle Secure Coding Standard for Java OBJ00-J. Declare data members as private and provide accessible wrapper methods

No labels

Space shortcuts

Page tree

Guidelines

Risk Assessment Summary

Recommendations