Apache MyFaces JSF-2.1 Core API - FindBugs Bug Detector Report

JSF Implementations

Core JSF-2.2
Core JSF-2.1
- API
- Impl
- Shared
- Bundle
Core JSF-2.0
Core JSF-1.2
Core JSF-1.1

UI-Component Sets

Add-ons and Extensions

Documentation

Project Documentation

Foundation

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

Classes	Bugs	Errors	Missing Classes
514	132	0	0

Files

Class	Bugs
javax.faces.FactoryFinder	2
javax.faces._FactoryFinderProviderFactory	2
javax.faces.application.FacesMessage$Severity	1
javax.faces.application.NavigationCase	1
javax.faces.application.StateManager$SerializedView	1
javax.faces.component.UICommand	1
javax.faces.component.UIComponent	4
javax.faces.component.UIComponent$BundleMap	1
javax.faces.component.UIComponentBase	3
javax.faces.component.UIData$EditableValueHolderState	1
javax.faces.component.UIInput	1
javax.faces.component.UIViewParameter	1
javax.faces.component.UIViewRoot	2
javax.faces.component.UIViewRoot$Events	1
javax.faces.component._AttachedCollectionStateWrapper	1
javax.faces.component._AttachedListStateWrapper	1
javax.faces.component._ComponentAttributesMap	2
javax.faces.component._ComponentChildrenList	2
javax.faces.component._ComponentFacetMap	9
javax.faces.component._ComponentUtils	1
javax.faces.component._DeltaStateHelper$InternalDeltaListMap	1
javax.faces.component._DeltaStateHelper$InternalList	1
javax.faces.component._DeltaStateHelper$InternalMap	1
javax.faces.component._ExternalSpecifications	1
javax.faces.component._LabeledFacesMessage	1
javax.faces.component._MethodBindingToMethodExpression	2
javax.faces.component._PrimitiveArrayIterator	1
javax.faces.component._SharedRendererUtils	1
javax.faces.component._ValueBindingToValueExpression	1
javax.faces.component._ViewAttributeMap	2
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalDeltaListMap	1
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalList	1
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalMap	1
javax.faces.component.behavior._AttachedListStateWrapper	1
javax.faces.component.behavior._DeltaStateHelper$InternalDeltaListMap	1
javax.faces.component.behavior._DeltaStateHelper$InternalList	1
javax.faces.component.behavior._DeltaStateHelper$InternalMap	1
javax.faces.component.visit.VisitContext$AllIdsCollection	1
javax.faces.context.PartialResponseWriter	2
javax.faces.convert.NumberConverter	2
javax.faces.convert._LabeledFacesMessage	1
javax.faces.event.ActionEvent	1
javax.faces.event.AjaxBehaviorEvent	2
javax.faces.event.ExceptionQueuedEvent	1
javax.faces.event.MethodExpressionActionListener	1
javax.faces.event.MethodExpressionValueChangeListener	1
javax.faces.event.PhaseEvent	2
javax.faces.event.PhaseId	1
javax.faces.event.PostAddToViewEvent	1
javax.faces.event.PostConstructApplicationEvent	1
javax.faces.event.PostConstructCustomScopeEvent	1
javax.faces.event.PostConstructViewMapEvent	1
javax.faces.event.PostRestoreStateEvent	1
javax.faces.event.PostValidateEvent	1
javax.faces.event.PreDestroyApplicationEvent	1
javax.faces.event.PreDestroyCustomScopeEvent	1
javax.faces.event.PreDestroyViewMapEvent	1
javax.faces.event.PreRemoveFromViewEvent	1
javax.faces.event.PreRenderComponentEvent	1
javax.faces.event.PreRenderViewEvent	1
javax.faces.event.PreValidateEvent	1
javax.faces.event.SystemEvent	1
javax.faces.event.ValueChangeEvent	1
javax.faces.model.ArrayDataModel	2
javax.faces.model.DataModel	1
javax.faces.model.ResultDataModel	1
javax.faces.model.ResultSetDataModel$WrapResultSetMap	1
javax.faces.model.SelectItemGroup	3
javax.faces.validator.BeanValidator	5
javax.faces.validator.BeanValidator$1	1
javax.faces.validator.DoubleRangeValidator	7
javax.faces.validator.LengthValidator	3
javax.faces.validator.LongRangeValidator	4
javax.faces.validator.MethodExpressionValidator	1
javax.faces.validator.RegexValidator	3
javax.faces.validator.RequiredValidator	3
javax.faces.validator._ExternalSpecifications	1
javax.faces.validator._LabeledFacesMessage	1
javax.faces.validator._ValueReferenceResolver	1
javax.faces.view.facelets.CompositeFaceletHandler	2
javax.faces.webapp.FacesServlet	3
javax.faces.webapp.PreJsf2ExceptionHandlerFactory$PreJsf2ExceptionHandlerImpl	1
javax.faces.webapp.UIComponentTagBase	1

javax.faces.FactoryFinder

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in javax.faces.FactoryFinder.<static initializer>()	STYLE	REC_CATCH_EXCEPTION	135	Low
Exception is caught when Exception is not thrown in javax.faces.FactoryFinder.getClassLoader()	STYLE	REC_CATCH_EXCEPTION	612	Low

javax.faces._FactoryFinderProviderFactory

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in javax.faces._FactoryFinderProviderFactory.<static initializer>()	STYLE	REC_CATCH_EXCEPTION	87	Medium

javax.faces.application.FacesMessage$Severity

Bug	Category	Details	Line	Priority
javax.faces.application.FacesMessage$Severity defines compareTo(Object) and uses Object.equals()	BAD_PRACTICE	EQ_COMPARETO_USE_OBJECT_EQUALS	289	Medium

javax.faces.application.NavigationCase

Bug	Category	Details	Line	Priority
javax.faces.application.NavigationCase.getCondition(FacesContext) has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	112	Medium

javax.faces.application.StateManager$SerializedView

Bug	Category	Details	Line	Priority
Should javax.faces.application.StateManager$SerializedView be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	320-338	Medium

javax.faces.component.UICommand

Bug	Category	Details	Line	Priority
Method call in javax.faces.component.UICommand.queueEvent(FacesEvent) passes null for nonnull parameter of UIComponentBase.queueEvent(FacesEvent)	CORRECTNESS	NP_NULL_PARAM_DEREF	143	Medium

javax.faces.component.UIComponent

Bug	Category	Details	Line	Priority
Suspicious comparison of Boolean references in javax.faces.component.UIComponent.getCurrentComponent(FacesContext)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	477	Medium
Suspicious comparison of Boolean references in javax.faces.component.UIComponent.getCurrentCompositeComponent(FacesContext)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	527	Medium
Suspicious comparison of Boolean references in javax.faces.component.UIComponent.popComponentFromEL(FacesContext)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	1109	Medium
Suspicious comparison of Boolean references in javax.faces.component.UIComponent.pushComponentToEL(FacesContext, UIComponent)	BAD_PRACTICE	RC_REF_COMPARISON_BAD_PRACTICE_BOOLEAN	1234	Medium

javax.faces.component.UIComponent$BundleMap

Bug	Category	Details	Line	Priority
Redundant nullcheck of java.util.ResourceBundle.getObject(String), which is known to be non-null in javax.faces.component.UIComponent$BundleMap.containsKey(Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	1364	Low

javax.faces.component.UIComponentBase

Bug	Category	Details	Line	Priority
Questionable cast from java.util.Collection to java.util.ArrayList in javax.faces.component.UIComponentBase.saveAttachedState(FacesContext, Object)	STYLE	BC_BAD_CAST_TO_CONCRETE_COLLECTION	1777	High
Load of known null value in javax.faces.component.UIComponentBase.setParent(UIComponent)	STYLE	NP_LOAD_OF_KNOWN_NULL_VALUE	200	Medium
Method call in javax.faces.component.UIComponentBase.encodeEnd(FacesContext) passes null for nonnull parameter of UIComponent.popComponentFromEL(FacesContext)	CORRECTNESS	NP_NULL_PARAM_DEREF	673	Medium

javax.faces.component.UIData$EditableValueHolderState

Bug	Category	Details	Line	Priority
Should javax.faces.component.UIData$EditableValueHolderState be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	284-297	Medium

javax.faces.component.UIInput

Bug	Category	Details	Line	Priority
Use of non-localized String.toUpperCase() or String.toLowerCase	I18N	DM_CONVERT_CASE	524	Low

javax.faces.component.UIViewParameter

Bug	Category	Details	Line	Priority
Private method javax.faces.component.UIViewParameter.releaseRenderer() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	275-297	Low

javax.faces.component.UIViewRoot

Bug	Category	Details	Line	Priority
instanceof will always return true in javax.faces.component.UIViewRoot.getLocale(), since all java.util.Locale are instances of java.util.Locale	STYLE	BC_VACUOUS_INSTANCEOF	665	Medium
Exception is caught when Exception is not thrown in javax.faces.component.UIViewRoot._broadcastAll(FacesContext, List, Collection)	STYLE	REC_CATCH_EXCEPTION	1053	Low

javax.faces.component.UIViewRoot$Events

Bug	Category	Details	Line	Priority
Should javax.faces.component.UIViewRoot$Events be a _static_ inner class?	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC	1655-1673	Medium

javax.faces.component._AttachedCollectionStateWrapper

Bug	Category	Details	Line	Priority
Class javax.faces.component._AttachedCollectionStateWrapper defines non-transient non-serializable instance field _wrappedStateList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

javax.faces.component._AttachedListStateWrapper

Bug	Category	Details	Line	Priority
Class javax.faces.component._AttachedListStateWrapper defines non-transient non-serializable instance field _wrappedStateList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

javax.faces.component._ComponentAttributesMap

Bug	Category	Details	Line	Priority
Class javax.faces.component._ComponentAttributesMap defines non-transient non-serializable instance field _ccBeanInfo	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
Class javax.faces.component._ComponentAttributesMap defines non-transient non-serializable instance field _component	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

javax.faces.component._ComponentChildrenList

Bug	Category	Details	Line	Priority
Class javax.faces.component._ComponentChildrenList defines non-transient non-serializable instance field _component	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
Class javax.faces.component._ComponentChildrenList defines non-transient non-serializable instance field _list	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

javax.faces.component._ComponentFacetMap

Bug	Category	Details	Line	Priority
Class javax.faces.component._ComponentFacetMap defines non-transient non-serializable instance field _component	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
Class javax.faces.component._ComponentFacetMap defines non-transient non-serializable instance field _entrySet	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class javax.faces.component._ComponentFacetMap defines non-transient non-serializable instance field _keySet	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class javax.faces.component._ComponentFacetMap defines non-transient non-serializable instance field _map	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
Class javax.faces.component._ComponentFacetMap defines non-transient non-serializable instance field _valueCollection	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
javax.faces.component._ArrayMap stored into non-transient field _ComponentFacetMap._map	BAD_PRACTICE	SE_BAD_FIELD_STORE	37	High
javax.faces.component._ComponentFacetMap$ComponentFacetEntrySet stored into non-transient field _ComponentFacetMap._entrySet	BAD_PRACTICE	SE_BAD_FIELD_STORE	102	Medium
javax.faces.component._ComponentFacetMap$ComponentFacetKeySet stored into non-transient field _ComponentFacetMap._keySet	BAD_PRACTICE	SE_BAD_FIELD_STORE	111	Medium
javax.faces.component._ComponentFacetMap$ComponentFacetValueCollection stored into non-transient field _ComponentFacetMap._valueCollection	BAD_PRACTICE	SE_BAD_FIELD_STORE	85	Medium

javax.faces.component._ComponentUtils

Bug	Category	Details	Line	Priority
Private method javax.faces.component._ComponentUtils.dynamicIdIsEqual(String, String) is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	260	Low

javax.faces.component._DeltaStateHelper$InternalDeltaListMap

Bug	Category	Details	Line	Priority
javax.faces.component._DeltaStateHelper$InternalDeltaListMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	796-812	Low

javax.faces.component._DeltaStateHelper$InternalList

Bug	Category	Details	Line	Priority
javax.faces.component._DeltaStateHelper$InternalList is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	819-870	Low

javax.faces.component._DeltaStateHelper$InternalMap

Bug	Category	Details	Line	Priority
javax.faces.component._DeltaStateHelper$InternalMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	725-784	Low

javax.faces.component._ExternalSpecifications

Bug	Category	Details	Line	Priority
Incorrect lazy initialization and update of static field javax.faces.component._ExternalSpecifications.beanValidationAvailable in javax.faces.component._ExternalSpecifications.isBeanValidationAvailable()	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	51-57	Medium

javax.faces.component._LabeledFacesMessage

Bug	Category	Details	Line	Priority
javax.faces.component._LabeledFacesMessage is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	37-76	Low

javax.faces.component._MethodBindingToMethodExpression

Bug	Category	Details	Line	Priority
Class javax.faces.component._MethodBindingToMethodExpression defines non-transient non-serializable instance field methodBinding	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low
javax.faces.component._MethodBindingToMethodExpression is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	40-256	Medium

javax.faces.component._PrimitiveArrayIterator

Bug	Category	Details	Line	Priority
javax.faces.component._PrimitiveArrayIterator.next() can't throw NoSuchElementException	BAD_PRACTICE	IT_NO_SUCH_ELEMENT	48	Medium

javax.faces.component._SharedRendererUtils

Bug	Category	Details	Line	Priority
Exception is caught when Exception is not thrown in javax.faces.component._SharedRendererUtils.getConvertedUISelectManyValue(FacesContext, UISelectMany, String[], boolean)	STYLE	REC_CATCH_EXCEPTION	249	Low

javax.faces.component._ValueBindingToValueExpression

Bug	Category	Details	Line	Priority
Class javax.faces.component._ValueBindingToValueExpression defines non-transient non-serializable instance field _valueBinding	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

javax.faces.component._ViewAttributeMap

Bug	Category	Details	Line	Priority
Class javax.faces.component._ViewAttributeMap defines non-transient non-serializable instance field _root	BAD_PRACTICE	SE_BAD_FIELD	Not available	High
Class javax.faces.component._ViewAttributeMap defines non-transient non-serializable instance field _delegate	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalDeltaListMap

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalDeltaListMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	636-652	Low

javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalList

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalList is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	659-710	Low

javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalMap

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._AjaxBehaviorDeltaStateHelper$InternalMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	565-624	Low

javax.faces.component.behavior._AttachedListStateWrapper

Bug	Category	Details	Line	Priority
Class javax.faces.component.behavior._AttachedListStateWrapper defines non-transient non-serializable instance field _wrappedStateList	BAD_PRACTICE	SE_BAD_FIELD	Not available	Low

javax.faces.component.behavior._DeltaStateHelper$InternalDeltaListMap

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._DeltaStateHelper$InternalDeltaListMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	751-767	Low

javax.faces.component.behavior._DeltaStateHelper$InternalList

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._DeltaStateHelper$InternalList is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	774-825	Low

javax.faces.component.behavior._DeltaStateHelper$InternalMap

Bug	Category	Details	Line	Priority
javax.faces.component.behavior._DeltaStateHelper$InternalMap is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	680-739	Low

javax.faces.component.visit.VisitContext$AllIdsCollection

Bug	Category	Details	Line	Priority
javax.faces.component.visit.VisitContext$AllIdsCollection is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	64-128	Low

javax.faces.context.PartialResponseWriter

Bug	Category	Details	Line	Priority
Method javax.faces.context.PartialResponseWriter.startExtension(Map) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	211	Medium
Method javax.faces.context.PartialResponseWriter.updateAttributes(String, Map) makes inefficient use of keySet iterator instead of entrySet iterator	PERFORMANCE	WMI_WRONG_MAP_ITERATOR	255	Medium

javax.faces.convert.NumberConverter

Bug	Category	Details	Line	Priority
Switch statement found in javax.faces.convert.NumberConverter.checkJavaVersion14() where one case falls through to the next case	STYLE	SF_SWITCH_FALLTHROUGH	604-608	Medium
Switch statement found in javax.faces.convert.NumberConverter.checkJavaVersion14() where default case is missing	STYLE	SF_SWITCH_NO_DEFAULT	610-615	Low

javax.faces.convert._LabeledFacesMessage

Bug	Category	Details	Line	Priority
javax.faces.convert._LabeledFacesMessage is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	37-77	Low

javax.faces.event.ActionEvent

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to javax.faces.event.ActionListener in javax.faces.event.ActionEvent.processListener(FacesListener)	STYLE	BC_UNCONFIRMED_CAST	51	Low

javax.faces.event.AjaxBehaviorEvent

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to javax.faces.event.AjaxBehaviorListener in javax.faces.event.AjaxBehaviorEvent.processListener(FacesListener)	STYLE	BC_UNCONFIRMED_CAST	57	Low
javax.faces.event.AjaxBehaviorEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	39-58	Low

javax.faces.event.ExceptionQueuedEvent

Bug	Category	Details	Line	Priority
javax.faces.event.ExceptionQueuedEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	34-39	Low

javax.faces.event.MethodExpressionActionListener

Bug	Category	Details	Line	Priority
Redundant nullcheck of cause, which is known to be non-null in javax.faces.event.MethodExpressionActionListener.processAction(ActionEvent)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	108	Low

javax.faces.event.MethodExpressionValueChangeListener

Bug	Category	Details	Line	Priority
Redundant nullcheck of cause, which is known to be non-null in javax.faces.event.MethodExpressionValueChangeListener.processValueChange(ValueChangeEvent)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	106	Low

javax.faces.event.PhaseEvent

Bug	Category	Details	Line	Priority
Class javax.faces.event.PhaseEvent defines non-transient non-serializable instance field _facesContext	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium
Class javax.faces.event.PhaseEvent defines non-transient non-serializable instance field _phaseId	BAD_PRACTICE	SE_BAD_FIELD	Not available	Medium

javax.faces.event.PhaseId

Bug	Category	Details	Line	Priority
javax.faces.event.PhaseId defines compareTo(Object) and uses Object.equals()	BAD_PRACTICE	EQ_COMPARETO_USE_OBJECT_EQUALS	78	Medium

javax.faces.event.PostAddToViewEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostAddToViewEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-45	Low

javax.faces.event.PostConstructApplicationEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostConstructApplicationEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-44	Low

javax.faces.event.PostConstructCustomScopeEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostConstructCustomScopeEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	35-43	Low

javax.faces.event.PostConstructViewMapEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostConstructViewMapEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.PostRestoreStateEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostRestoreStateEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-42	Low

javax.faces.event.PostValidateEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PostValidateEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.PreDestroyApplicationEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreDestroyApplicationEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-44	Low

javax.faces.event.PreDestroyCustomScopeEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreDestroyCustomScopeEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	33-41	Low

javax.faces.event.PreDestroyViewMapEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreDestroyViewMapEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.PreRemoveFromViewEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreRemoveFromViewEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-45	Low

javax.faces.event.PreRenderComponentEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreRenderComponentEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.PreRenderViewEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreRenderViewEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.PreValidateEvent

Bug	Category	Details	Line	Priority
javax.faces.event.PreValidateEvent is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	36-37	Low

javax.faces.event.SystemEvent

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to javax.faces.event.SystemEventListener in javax.faces.event.SystemEvent.processListener(FacesListener)	STYLE	BC_UNCONFIRMED_CAST	43	Low

javax.faces.event.ValueChangeEvent

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.FacesListener to javax.faces.event.ValueChangeListener in javax.faces.event.ValueChangeEvent.processListener(FacesListener)	STYLE	BC_UNCONFIRMED_CAST	68	Low

javax.faces.model.ArrayDataModel

Bug	Category	Details	Line	Priority
javax.faces.model.ArrayDataModel.getWrappedData() may expose internal representation by returning ArrayDataModel._data	MALICIOUS_CODE	EI_EXPOSE_REP	82	Medium
javax.faces.model.ArrayDataModel.setWrappedData(Object) may expose internal representation by storing an externally mutable object into ArrayDataModel._data	MALICIOUS_CODE	EI_EXPOSE_REP2	122	Medium

javax.faces.model.DataModel

Bug	Category	Details	Line	Priority
javax.faces.model.DataModel.getDataModelListeners() may expose internal representation by returning DataModel._cachedListenersArray	MALICIOUS_CODE	EI_EXPOSE_REP	86	Medium

javax.faces.model.ResultDataModel

Bug	Category	Details	Line	Priority
Should javax.faces.model.ResultDataModel.getRows() return a zero length array rather than null?	STYLE	PZLA_PREFER_ZERO_LENGTH_ARRAYS	121	Low

javax.faces.model.ResultSetDataModel$WrapResultSetMap

Bug	Category	Details	Line	Priority
javax.faces.model.ResultSetDataModel$WrapResultSetMap is serializable but also an inner class of a non-serializable class	BAD_PRACTICE	SE_BAD_FIELD_INNER_CLASS	253-397	Low

javax.faces.model.SelectItemGroup

Bug	Category	Details	Line	Priority
javax.faces.model.SelectItemGroup.getSelectItems() may expose internal representation by returning SelectItemGroup._selectItems	MALICIOUS_CODE	EI_EXPOSE_REP	62	Medium
new javax.faces.model.SelectItemGroup(String, String, boolean, SelectItem[]) may expose internal representation by storing an externally mutable object into SelectItemGroup._selectItems	MALICIOUS_CODE	EI_EXPOSE_REP2	56	Medium
javax.faces.model.SelectItemGroup.setSelectItems(SelectItem[]) may expose internal representation by storing an externally mutable object into SelectItemGroup._selectItems	MALICIOUS_CODE	EI_EXPOSE_REP2	71	Medium

javax.faces.validator.BeanValidator

Bug	Category	Details	Line	Priority
javax.faces.validator.BeanValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	447	Medium
Redundant nullcheck of reference, which is known to be non-null in javax.faces.validator.BeanValidator.validate(FacesContext, UIComponent, Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	157	Low
Redundant nullcheck of valueBaseClass, which is known to be non-null in javax.faces.validator.BeanValidator.validate(FacesContext, UIComponent, Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	168	Low
Private method javax.faces.validator.BeanValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	453	Low
Private method javax.faces.validator.BeanValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	447	Low

javax.faces.validator.BeanValidator$1

Bug	Category	Details	Line	Priority
The class javax.faces.validator.BeanValidator$1 could be refactored into a named _static_ inner class	PERFORMANCE	SIC_INNER_SHOULD_BE_STATIC_ANON	340-343	Low

javax.faces.validator.DoubleRangeValidator

Bug	Category	Details	Line	Priority
Method new javax.faces.validator.DoubleRangeValidator(double) invokes inefficient Double.valueOf(double) constructor; use DoubleRangeValidator.java:[line 73] instead	PERFORMANCE	DM_FP_NUMBER_CTOR	73	Low
Method new javax.faces.validator.DoubleRangeValidator(double, double) invokes inefficient Double.valueOf(double) constructor; use DoubleRangeValidator.java:[line 79] instead	PERFORMANCE	DM_FP_NUMBER_CTOR	79	Low
Method javax.faces.validator.DoubleRangeValidator.setMaximum(double) invokes inefficient Double.valueOf(double) constructor; use DoubleRangeValidator.java:[line 166] instead	PERFORMANCE	DM_FP_NUMBER_CTOR	166	Low
Method javax.faces.validator.DoubleRangeValidator.setMinimum(double) invokes inefficient Double.valueOf(double) constructor; use DoubleRangeValidator.java:[line 182] instead	PERFORMANCE	DM_FP_NUMBER_CTOR	182	Low
javax.faces.validator.DoubleRangeValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	270	Medium
Private method javax.faces.validator.DoubleRangeValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	276	Low
Private method javax.faces.validator.DoubleRangeValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	270	Low

javax.faces.validator.LengthValidator

Bug	Category	Details	Line	Priority
javax.faces.validator.LengthValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	247	Medium
Private method javax.faces.validator.LengthValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	253	Low
Private method javax.faces.validator.LengthValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	247	Low

javax.faces.validator.LongRangeValidator

Bug	Category	Details	Line	Priority
Method javax.faces.validator.LongRangeValidator.setMinimum(long) invokes inefficient new Long(long) constructor; use Long.valueOf(long) instead	PERFORMANCE	DM_NUMBER_CTOR	183	Medium
javax.faces.validator.LongRangeValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	276	Medium
Private method javax.faces.validator.LongRangeValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	282	Low
Private method javax.faces.validator.LongRangeValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	276	Low

javax.faces.validator.MethodExpressionValidator

Bug	Category	Details	Line	Priority
Redundant nullcheck of cause, which is known to be non-null in javax.faces.validator.MethodExpressionValidator.validate(FacesContext, UIComponent, Object)	STYLE	RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE	74	Low

javax.faces.validator.RegexValidator

Bug	Category	Details	Line	Priority
javax.faces.validator.RegexValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	244	Medium
Private method javax.faces.validator.RegexValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	250	Low
Private method javax.faces.validator.RegexValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	244	Low

javax.faces.validator.RequiredValidator

Bug	Category	Details	Line	Priority
javax.faces.validator.RequiredValidator.isDisabled() has Boolean return type and returns explicit null	BAD_PRACTICE	NP_BOOLEAN_RETURN_NULL	95	Medium
Private method javax.faces.validator.RequiredValidator.getFor() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	101	Low
Private method javax.faces.validator.RequiredValidator.isDisabled() is never called	PERFORMANCE	UPM_UNCALLED_PRIVATE_METHOD	95	Low

javax.faces.validator._ExternalSpecifications

Bug	Category	Details	Line	Priority
Incorrect lazy initialization and update of static field javax.faces.validator._ExternalSpecifications.beanValidationAvailable in javax.faces.validator._ExternalSpecifications.isBeanValidationAvailable()	MT_CORRECTNESS	LI_LAZY_INIT_UPDATE_STATIC	55-61	Medium

javax.faces.validator._LabeledFacesMessage

Bug	Category	Details	Line	Priority
javax.faces.validator._LabeledFacesMessage is Serializable; consider declaring a serialVersionUID	BAD_PRACTICE	SE_NO_SERIALVERSIONID	37-78	Low

javax.faces.validator._ValueReferenceResolver

Bug	Category	Details	Line	Priority
_ValueReferenceResolver.lastObject not initialized in constructor	STYLE	UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR	Not available	Low

javax.faces.view.facelets.CompositeFaceletHandler

Bug	Category	Details	Line	Priority
javax.faces.view.facelets.CompositeFaceletHandler.getHandlers() may expose internal representation by returning CompositeFaceletHandler.children	MALICIOUS_CODE	EI_EXPOSE_REP	55	Medium
new javax.faces.view.facelets.CompositeFaceletHandler(FaceletHandler[]) may expose internal representation by storing an externally mutable object into CompositeFaceletHandler.children	MALICIOUS_CODE	EI_EXPOSE_REP2	38	Medium

javax.faces.webapp.FacesServlet

Bug	Category	Details	Line	Priority
javax.faces.webapp.FacesServlet._facesContextFactory is a mutable servlet field	MT_CORRECTNESS	MSF_MUTABLE_SERVLET_FIELD	245	Low
javax.faces.webapp.FacesServlet._lifecycle is a mutable servlet field	MT_CORRECTNESS	MSF_MUTABLE_SERVLET_FIELD	197	Low
javax.faces.webapp.FacesServlet._servletConfig is a mutable servlet field	MT_CORRECTNESS	MSF_MUTABLE_SERVLET_FIELD	103	Low

javax.faces.webapp.PreJsf2ExceptionHandlerFactory$PreJsf2ExceptionHandlerImpl

Bug	Category	Details	Line	Priority
Unchecked/unconfirmed cast from javax.faces.event.SystemEvent to javax.faces.event.ExceptionQueuedEvent in javax.faces.webapp.PreJsf2ExceptionHandlerFactory$PreJsf2ExceptionHandlerImpl.processEvent(SystemEvent)	STYLE	BC_UNCONFIRMED_CAST	343	Low

javax.faces.webapp.UIComponentTagBase

Bug	Category	Details	Line	Priority
javax.faces.webapp.UIComponentTagBase.log isn't final but should be	MALICIOUS_CODE	MS_SHOULD_BE_FINAL	37	High