The following document contains the results of SpotBugs
SpotBugs Version is 4.8.4
Threshold is medium
Effort is default
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 25 | 22 | 0 | 0 |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| nl.tudelft.simulation.naming.context.FileContextFactory.getInitialContext(Hashtable, String) may expose internal representation by returning FileContextFactory.context | MALICIOUS_CODE | EI_EXPOSE_REP | 55 | Medium |
| Static field "context" is modified by an instance level synchronized method. | MT_CORRECTNESS | SSD_DO_NOT_USE_INSTANCE_LOCK_ON_SHARED_STATIC_DATA | 42 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class nl.tudelft.simulation.naming.context.JvmContext at new nl.tudelft.simulation.naming.context.JvmContext(String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 56 | Medium |
| Exception thrown in class nl.tudelft.simulation.naming.context.JvmContext at new nl.tudelft.simulation.naming.context.JvmContext(ContextInterface, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 66 | Medium |
| nl.tudelft.simulation.naming.context.JvmContext.bindings() may expose internal representation by returning JvmContext.elements | MALICIOUS_CODE | EI_EXPOSE_REP | 417 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| nl.tudelft.simulation.naming.context.JvmContextFactory.getInitialContext(Hashtable, String) may expose internal representation by returning JvmContextFactory.context | MALICIOUS_CODE | EI_EXPOSE_REP | 30 | Medium |
| Static field "context" is modified by an instance level synchronized method. | MT_CORRECTNESS | SSD_DO_NOT_USE_INSTANCE_LOCK_ON_SHARED_STATIC_DATA | 28 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class nl.tudelft.simulation.naming.context.RemoteContext at new nl.tudelft.simulation.naming.context.RemoteContext(String, int, String, ContextInterface, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 71 | Medium |
| Exception thrown in class nl.tudelft.simulation.naming.context.RemoteContext at new nl.tudelft.simulation.naming.context.RemoteContext(URL, ContextInterface, String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 93 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new nl.tudelft.simulation.naming.context.RemoteContext$RemoteChangeEventProducer(RemoteContext, String, int, String) may expose internal representation by storing an externally mutable object into RemoteContext$RemoteChangeEventProducer.this$0 | MALICIOUS_CODE | EI_EXPOSE_REP2 | 446 | Medium |
| Should nl.tudelft.simulation.naming.context.RemoteContext$RemoteChangeEventProducer be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 446-460 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| nl.tudelft.simulation.naming.context.RemoteContextFactory.getInitialContext(Hashtable, String) may expose internal representation by returning RemoteContextFactory.context | MALICIOUS_CODE | EI_EXPOSE_REP | 43 | Medium |
| Static field "context" is modified by an instance level synchronized method. | MT_CORRECTNESS | SSD_DO_NOT_USE_INSTANCE_LOCK_ON_SHARED_STATIC_DATA | 100 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class nl.tudelft.simulation.naming.context.event.ContextEventProducerImpl at new nl.tudelft.simulation.naming.context.event.ContextEventProducerImpl(EventContext) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 110 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new nl.tudelft.simulation.naming.context.event.ContextEventProducerImpl$PatternListener(ContextEventProducerImpl, Pattern, EventListener) may expose internal representation by storing an externally mutable object into ContextEventProducerImpl$PatternListener.this$0 | MALICIOUS_CODE | EI_EXPOSE_REP2 | 398 | Medium |
| nl.tudelft.simulation.naming.context.event.ContextEventProducerImpl$PatternListener is serializable and an inner class | BAD_PRACTICE | SE_INNER_CLASS | 398-419 | Medium |
| Should nl.tudelft.simulation.naming.context.event.ContextEventProducerImpl$PatternListener be a _static_ inner class? | PERFORMANCE | SIC_INNER_SHOULD_BE_STATIC | 398-419 | Medium |
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Hard coded reference to an absolute pathname in nl.tudelft.simulation.naming.context.event.InitialEventContext.buildEnvironment(Hashtable) | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | 210 | Medium |
| Incorrect lazy initialization and update of static field nl.tudelft.simulation.naming.context.event.InitialEventContext.INSTANCE in nl.tudelft.simulation.naming.context.event.InitialEventContext.instantiate(Hashtable, String) | MT_CORRECTNESS | LI_LAZY_INIT_UPDATE_STATIC | 145-150 | High |
| Public static nl.tudelft.simulation.naming.context.event.InitialEventContext.instantiate(Hashtable, String) may expose internal representation by returning InitialEventContext.INSTANCE | MALICIOUS_CODE | MS_EXPOSE_REP | 147 | Medium |
| Instance-getter method of class using singleton design pattern (nl.tudelft.simulation.naming.context.event.InitialEventContext) is not synchronized. | CORRECTNESS | SING_SINGLETON_GETTER_NOT_SYNCHRONIZED | 145-152 | Medium |
| Class (nl.tudelft.simulation.naming.context.event.InitialEventContext) using singleton design pattern directly or indirectly implements Serializable interface. | CORRECTNESS | SING_SINGLETON_IMPLEMENTS_SERIALIZABLE | 92-699 | Medium |