FindBugs 错误检测器报告
以下文档包含FindBugs的结果
FindBugs 版本是3.0.1
门槛中等
努力是最小的
概括
| 课程 | 错误 | 错误 | 缺课 |
|---|---|---|---|
| 51 | 14 | 0 | 0 |
文件
| 班级 | 错误 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| org.apache.maven.surefire.booter.Classpath | 1 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| org.apache.maven.surefire.booter.ForkedBooter | 3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| org.apache.maven.surefire.booter.IsolatedClassLoader | 4 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| org.apache.maven.surefire.booter.PpidChecker | 2 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  FindBugs Bug Detector ReportThe following document contains the results of FindBugs FindBugs Version is 3.0.1 Threshold is medium Effort is min Summary
Filesorg.apache.maven.surefire.booter.Classpath
org.apache.maven.surefire.booter.ForkedBooter
org.apache.maven.surefire.booter.IsolatedClassLoader
org.apache.maven.surefire.booter.PpidChecker
org.apache.maven.surefire.booter.PpidChecker$2
org.apache.maven.surefire.booter.SystemUtils
">org.apache.maven.surefire.booter.PpidChecker
FindBugs Bug Detector ReportThe following document contains the results of FindBugs FindBugs Version is 3.0.1 Threshold is medium Effort is min Summary
Filesorg.apache.maven.surefire.booter.Classpath
org.apache.maven.surefire.booter.ForkedBooter
org.apache.maven.surefire.booter.IsolatedClassLoader
org.apache.maven.surefire.booter.PpidChecker
org.apache.maven.surefire.booter.PpidChecker$2
org.apache.maven.surefire.booter.SystemUtils
|
1 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| org.apache.maven.surefire.booter.SystemUtils | 3 |
org.apache.maven.surefire.booter.Classpath
| 漏洞 | 类别 | 细节 | 线 | 优先 |
|---|---|---|---|---|
| org.apache.maven.surefire.booter.Classpath.createClassLoader(boolean, boolean, String) 创建一个 org.apache.maven.surefire.booter.IsolatedClassLoader 类加载器，它应该在 doPrivileged 块中执行 | 恶意代码 | DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED | 146 | 中等的 |
org.apache.maven.surefire.booter.ForkedBooter
| 漏洞 | 类别 | 细节 | 线 | 优先 |
|---|---|---|---|---|
| 尝试在 org.apache.maven.surefire.booter.ForkedBooter.createPingScheduler() 中更改 ScheduledThreadPoolExecutor 的最大池大小是徒劳的 | 正确性 | DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR | 601 | 高的 |
| 尝试在 org.apache.maven.surefire.booter.ForkedBooter.getJvmTerminator() 中更改 ScheduledThreadPoolExecutor 的最大池大小是徒劳的 | 正确性 | DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR | 444 | 高的 |
| Null 为 org.apache.maven.surefire.booter.ForkedBooter.run(ForkedBooter, String[]) 中 setupBooter(String, String, String, String) 的非空参数传递 | 正确性 | NP_NULL_PARAM_DEREF | 561 | 中等的 |
org.apache.maven.surefire.booter.IsolatedClassLoader
| 漏洞 | 类别 | 细节 | 线 | 优先 |
|---|---|---|---|---|
| org.apache.maven.surefire.booter.IsolatedClassLoader.urls 是或使用一个映射或一组 URL，这可能是性能猪 | 表现 | DMI_COLLECTION_OF_URLS | 无法使用 | 高的 |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) 是或使用映射或一组 URL，这可能是性能猪 | 表现 | DMI_COLLECTION_OF_URLS | 65 | 高的 |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) 是或使用映射或一组 URL，这可能是性能猪 | 表现 | DMI_COLLECTION_OF_URLS | 62 | 高的 |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) 是或使用映射或一组 URL，这可能是性能猪 | 表现 | DMI_COLLECTION_OF_URLS | 62 | 高的 |
org.apache.maven.surefire.booter.PpidChecker
| 漏洞 | 类别 | 细节 | 线 | 优先 |
|---|---|---|---|---|
| 对 org.apache.maven.surefire.booter.PpidChecker.canExecuteLocalUnixPs() 中的绝对路径名的硬编码引用 | 风格 | DMI_HARDCODED_ABSOLUTE_FILENAME | 272 | 中等的 |
| 在 org.apache.maven.surefire.booter.PpidChecker.canExecuteStandardUnixPs() 中对绝对路径名的硬编码引用 | 风格 | DMI_HARDCODED_ABSOLUTE_FILENAME | 284 | 中等的 |
org.apache.maven.surefire.booter.PpidChecker
FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is medium
Effort is min
Summary
Classes
Bugs
Errors
Missing Classes
51
14
0
0
Files
org.apache.maven.surefire.booter.Classpath
Bug
Category
Details
Line
Priority
org.apache.maven.surefire.booter.Classpath.createClassLoader(boolean, boolean, String) creates a org.apache.maven.surefire.booter.IsolatedClassLoader classloader, which should be performed within a doPrivileged block
MALICIOUS_CODE
DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED
146
Medium
org.apache.maven.surefire.booter.ForkedBooter
Bug
Category
Details
Line
Priority
Futile attempt to change max pool size of ScheduledThreadPoolExecutor in org.apache.maven.surefire.booter.ForkedBooter.createPingScheduler()
CORRECTNESS
DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR
601
High
Futile attempt to change max pool size of ScheduledThreadPoolExecutor in org.apache.maven.surefire.booter.ForkedBooter.getJvmTerminator()
CORRECTNESS
DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR
444
High
Null passed for non-null parameter of setupBooter(String, String, String, String) in org.apache.maven.surefire.booter.ForkedBooter.run(ForkedBooter, String[])
CORRECTNESS
NP_NULL_PARAM_DEREF
561
Medium
org.apache.maven.surefire.booter.IsolatedClassLoader
Bug
Category
Details
Line
Priority
org.apache.maven.surefire.booter.IsolatedClassLoader.urls is or uses a map or set of URLs, which can be a performance hog
PERFORMANCE
DMI_COLLECTION_OF_URLS
Not available
High
org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog
PERFORMANCE
DMI_COLLECTION_OF_URLS
65
High
org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog
PERFORMANCE
DMI_COLLECTION_OF_URLS
62
High
org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog
PERFORMANCE
DMI_COLLECTION_OF_URLS
62
High
org.apache.maven.surefire.booter.PpidChecker
Bug
Category
Details
Line
Priority
Hard coded reference to an absolute pathname in org.apache.maven.surefire.booter.PpidChecker.canExecuteLocalUnixPs()
STYLE
DMI_HARDCODED_ABSOLUTE_FILENAME
272
Medium
Hard coded reference to an absolute pathname in org.apache.maven.surefire.booter.PpidChecker.canExecuteStandardUnixPs()
STYLE
DMI_HARDCODED_ABSOLUTE_FILENAME
284
Medium
org.apache.maven.surefire.booter.PpidChecker$2
Bug
Category
Details
Line
Priority
Result of integer multiplication cast to long in org.apache.maven.surefire.booter.PpidChecker$2.consumeLine(String, ProcessInfo)
STYLE
ICAST_INTEGER_MULTIPLY_CAST_TO_LONG
227
Medium
org.apache.maven.surefire.booter.SystemUtils
Bug
Category
Details
Line
Priority
Found reliance on default encoding in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String): new java.io.FileReader(String)
I18N
DM_DEFAULT_ENCODING
367
High
Found reliance on default encoding in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnLinux(String): new java.io.FileReader(String)
I18N
DM_DEFAULT_ENCODING
325
High
Dereference of the result of readLine() without nullcheck in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String)
STYLE
NP_DEREFERENCE_OF_READLINE_VALUE
370
Medium
FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is medium
Effort is min
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 51 | 14 | 0 | 0 |
Files
org.apache.maven.surefire.booter.Classpath
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.maven.surefire.booter.Classpath.createClassLoader(boolean, boolean, String) creates a org.apache.maven.surefire.booter.IsolatedClassLoader classloader, which should be performed within a doPrivileged block | MALICIOUS_CODE | DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED | 146 | Medium |
org.apache.maven.surefire.booter.ForkedBooter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Futile attempt to change max pool size of ScheduledThreadPoolExecutor in org.apache.maven.surefire.booter.ForkedBooter.createPingScheduler() | CORRECTNESS | DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR | 601 | High |
| Futile attempt to change max pool size of ScheduledThreadPoolExecutor in org.apache.maven.surefire.booter.ForkedBooter.getJvmTerminator() | CORRECTNESS | DMI_FUTILE_ATTEMPT_TO_CHANGE_MAXPOOL_SIZE_OF_SCHEDULED_THREAD_POOL_EXECUTOR | 444 | High |
| Null passed for non-null parameter of setupBooter(String, String, String, String) in org.apache.maven.surefire.booter.ForkedBooter.run(ForkedBooter, String[]) | CORRECTNESS | NP_NULL_PARAM_DEREF | 561 | Medium |
org.apache.maven.surefire.booter.IsolatedClassLoader
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.maven.surefire.booter.IsolatedClassLoader.urls is or uses a map or set of URLs, which can be a performance hog | PERFORMANCE | DMI_COLLECTION_OF_URLS | Not available | High |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog | PERFORMANCE | DMI_COLLECTION_OF_URLS | 65 | High |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog | PERFORMANCE | DMI_COLLECTION_OF_URLS | 62 | High |
| org.apache.maven.surefire.booter.IsolatedClassLoader.addURL(URL) is or uses a map or set of URLs, which can be a performance hog | PERFORMANCE | DMI_COLLECTION_OF_URLS | 62 | High |
org.apache.maven.surefire.booter.PpidChecker
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Hard coded reference to an absolute pathname in org.apache.maven.surefire.booter.PpidChecker.canExecuteLocalUnixPs() | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | 272 | Medium |
| Hard coded reference to an absolute pathname in org.apache.maven.surefire.booter.PpidChecker.canExecuteStandardUnixPs() | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | 284 | Medium |
org.apache.maven.surefire.booter.PpidChecker$2
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Result of integer multiplication cast to long in org.apache.maven.surefire.booter.PpidChecker$2.consumeLine(String, ProcessInfo) | STYLE | ICAST_INTEGER_MULTIPLY_CAST_TO_LONG | 227 | Medium |
org.apache.maven.surefire.booter.SystemUtils
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String): new java.io.FileReader(String) | I18N | DM_DEFAULT_ENCODING | 367 | High |
| Found reliance on default encoding in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnLinux(String): new java.io.FileReader(String) | I18N | DM_DEFAULT_ENCODING | 325 | High |
| Dereference of the result of readLine() without nullcheck in org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String) | STYLE | NP_DEREFERENCE_OF_READLINE_VALUE | 370 | Medium |
| 漏洞 | 类别 | 细节 | 线 | 优先 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
在 org.apache.maven.surefire.booter.PpidChecker
FindBugs Bug Detector ReportThe following document contains the results of FindBugs FindBugs Version is 3.0.1 Threshold is medium Effort is min Summary
Filesorg.apache.maven.surefire.booter.Classpath
org.apache.maven.surefire.booter.ForkedBooter
org.apache.maven.surefire.booter.IsolatedClassLoader
org.apache.maven.surefire.booter.PpidChecker
org.apache.maven.surefire.booter.PpidChecker$2
org.apache.maven.surefire.booter.SystemUtils
.consumeLine(String, ProcessInfo) 中将整数乘法转换为 long 的结果 |
风格 | ICAST_INTEGER_MULTIPLY_CAST_TO_LONG | 227 | 中等的 |
org.apache.maven.surefire.booter.SystemUtils
| 漏洞 | 类别 | 细节 | 线 | 优先 |
|---|---|---|---|---|
| 在 org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String) 中发现对默认编码的依赖：new java.io.FileReader(String) | I18N | DM_DEFAULT_ENCODING | 367 | 高的 |
| 在 org.apache.maven.surefire.booter.SystemUtils.pidStatusOnLinux(String) 中发现对默认编码的依赖：new java.io.FileReader(String) | I18N | DM_DEFAULT_ENCODING | 325 | 高的 |
| 在 org.apache.maven.surefire.booter.SystemUtils.pidStatusOnBSD(String) 中取消引用 readLine() 的结果而不进行 nullcheck | 风格 | NP_DEREFERENCE_OF_READLINE_VALUE | 370 | 中等的 |