Recommendations
OBJ00-J. Declare data members private
OBJ01-J. Understand how a superclass can affect a subclass
OBJ02-J. Avoid using finalizers
OBJ03-J. Be careful about final reference
OBJ04-J. Encapsulate the absence of an object by using a Null Object
OBJ05-J. Write garbage collection friendly code
Rules
OBJ30-J. Identify and handle immutable objects appropriately
OBJ31-J. Misusing public static variables
OBJ32-J. Do not allow partially initialized objects to be accessed
OBJ33-J. Limit extensibility of classes and methods
OBJ34-J. Compare classes and not class names
OBJ35-J. Use checked collections against external code
OBJ36-J. Provide mutable classes with a clone method
Risk Assessment Summary
Recommendations
Recommendation |
Severity |
Likelihood |
Remediation Cost |
Priority |
Level |
|---|---|---|---|---|---|
OBJ00-J |
medium |
likely |
medium |
P12 |
L1 |
OBJ01-J |
medium |
probable |
high |
P4 |
L3 |
OBJ02-J |
medium |
probable |
medium |
P8 |
L2 |
OBJ03-J |
low |
probable |
medium |
P4 |
L3 |
Rules
Rule |
Severity |
Likelihood |
Remediation Cost |
Priority |
Level |
|---|---|---|---|---|---|
OBJ30-J |
low |
unlikely |
medium |
P2 |
L3 |
OBJ31-J |
low |
probable |
medium |
P6 |
L2 |
OBJ32-J |
medium |
probable |
medium |
P8 |
L2 |
OBJ33-J |
medium |
likely |
medium |
P12 |
L1 |
OBJ34-J |
high |
unlikely |
low |
P9 |
L2 |
OBJ35-J |
medium |
probable |
medium |
P8 |
L2 |
OBJ36-J |
low |
likely |
low |
P9 |
L2 |
FLP31-J. Convert integers to floating point for floating point operations The CERT Sun Microsystems Secure Coding Standard for Java OBJ00-J. Declare data members private