UI-Component Sets

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is low

Effort is min

Summary

ClassesBugsErrorsMissing Classes
16618001

Files

ClassBugs
org.apache.myfaces.shared.application.DefaultViewHandlerSupport4
org.apache.myfaces.shared.context.flash.SubKeyMap$Entry1
org.apache.myfaces.shared.renderkit.ContentTypeUtils3
org.apache.myfaces.shared.renderkit.RendererUtils3
org.apache.myfaces.shared.renderkit._SharedRendererUtils1
org.apache.myfaces.shared.renderkit.html.HTML70
org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase4
org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase3
org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase4
org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils8
org.apache.myfaces.shared.renderkit.html.HtmlResponseWriterImpl2
org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase1
org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase7
org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase2
org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase1
org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder2
org.apache.myfaces.shared.renderkit.html.util.JavascriptUtils1
org.apache.myfaces.shared.resource.BaseResourceHandlerSupport3
org.apache.myfaces.shared.resource.ResourceLoader$VersionComparator1
org.apache.myfaces.shared.resource.ResourceLoaderUtils2
org.apache.myfaces.shared.resource.ValueExpressionFilterInputStream2
org.apache.myfaces.shared.test.ClassElementHandler1
org.apache.myfaces.shared.trace.TracingIterator1
org.apache.myfaces.shared.util.ClassUtils2
org.apache.myfaces.shared.util.ConcurrentLRUCache3
org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread4
org.apache.myfaces.shared.util.ExceptionUtils1
org.apache.myfaces.shared.util.StateUtils29
org.apache.myfaces.shared.util.StreamCharBuffer$StreamCharBufferSubChunkReader1
org.apache.myfaces.shared.util.StringCharArrayAccessor6
org.apache.myfaces.shared.util.servlet.SourceCodeServlet1
org.apache.myfaces.shared.view.JspViewDeclarationLanguageBase2
org.apache.myfaces.shared.webapp.webxml.WebXmlParser1

org.apache.myfaces.shared.application.DefaultViewHandlerSupport

BugCategoryDetailsLinePriority
Redundant nullcheck of mapping, which is known to be non-null in org.apache.myfaces.shared.application.DefaultViewHandlerSupport.calculateActionURL(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE206Low
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.shared.application.DefaultViewHandlerSupport.calculateAndCheckViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE164Low
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.shared.application.DefaultViewHandlerSupport.calculateAndCheckViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE173Low
Redundant nullcheck of viewId, which is known to be non-null in org.apache.myfaces.shared.application.DefaultViewHandlerSupport.calculateViewId(FacesContext, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE129Low

org.apache.myfaces.shared.context.flash.SubKeyMap$Entry

BugCategoryDetailsLinePriority
Redundant nullcheck of key, which is known to be non-null in org.apache.myfaces.shared.context.flash.SubKeyMap$Entry.hashCode()STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE294Low

org.apache.myfaces.shared.renderkit.ContentTypeUtils

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.renderkit.ContentTypeUtils.AJAX_XHTML_ALLOWED_CONTENT_TYPES should be package protectedMALICIOUS_CODEMS_PKGPROTECT47Low
org.apache.myfaces.shared.renderkit.ContentTypeUtils.HTML_ALLOWED_CONTENT_TYPES should be package protectedMALICIOUS_CODEMS_PKGPROTECT37Low
org.apache.myfaces.shared.renderkit.ContentTypeUtils.XHTML_ALLOWED_CONTENT_TYPES should be package protectedMALICIOUS_CODEMS_PKGPROTECT44Low

org.apache.myfaces.shared.renderkit.RendererUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared.renderkit.RendererUtils.getConvertedUISelectOneValue(FacesContext, UISelectOne, Object), since all String are instances of StringSTYLEBC_VACUOUS_INSTANCEOF977Medium
Method org.apache.myfaces.shared.renderkit.RendererUtils.getViewSequence(FacesContext) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1204Medium
Possible null pointer dereference of content in org.apache.myfaces.shared.renderkit.RendererUtils.loadResourceFile(FacesContext, String)CORRECTNESSNP_NULL_ON_SOME_PATH1419Medium

org.apache.myfaces.shared.renderkit._SharedRendererUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.renderkit._SharedRendererUtils.getConvertedUISelectManyValue(FacesContext, UISelectMany, String[], boolean)STYLEREC_CATCH_EXCEPTION254Low

org.apache.myfaces.shared.renderkit.html.HTML

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT218Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT231Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT246Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT241Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT236Medium
org.apache.myfaces.shared.renderkit.html.HTML.ANCHOR_PASSTHROUGH_ATTRIBUTES_WITHOUT_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT250Medium
org.apache.myfaces.shared.renderkit.html.HTML.BODY_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT517Medium
org.apache.myfaces.shared.renderkit.html.HTML.BODY_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT529Medium
org.apache.myfaces.shared.renderkit.html.HTML.BODY_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT539Medium
org.apache.myfaces.shared.renderkit.html.HTML.BODY_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT543Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT361Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT374Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT143Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT89Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT97Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_EVENT_ATTRIBUTES_WITHOUT_ONSELECT_AND_ONCHANGE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT104Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT170Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT199Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT190Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT185Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT175Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT203Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT154Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT162Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONCLICK_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT166Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT195Medium
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_PASSTROUGH_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT158Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT81Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT58Medium
org.apache.myfaces.shared.renderkit.html.HTML.EVENT_HANDLER_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT70Medium
org.apache.myfaces.shared.renderkit.html.HTML.FORM_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT260Medium
org.apache.myfaces.shared.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT269Medium
org.apache.myfaces.shared.renderkit.html.HTML.FORM_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT273Medium
org.apache.myfaces.shared.renderkit.html.HTML.IMG_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT287Medium
org.apache.myfaces.shared.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT300Medium
org.apache.myfaces.shared.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT308Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT318Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_FILE_UPLOAD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT461Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT326Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT340Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT330Medium
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_STYLE_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT345Medium
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT385Medium
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT392Medium
org.apache.myfaces.shared.renderkit.html.HTML.MESSAGE_PASSTHROUGH_ATTRIBUTES_WITHOUT_TITLE_STYLE_AND_STYLE_CLASS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT481Medium
org.apache.myfaces.shared.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT408Medium
org.apache.myfaces.shared.renderkit.html.HTML.SELECT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT410Medium
org.apache.myfaces.shared.renderkit.html.HTML.SELECT_TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT488Medium
org.apache.myfaces.shared.renderkit.html.HTML.TABLE_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT420Medium
org.apache.myfaces.shared.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT431Medium
org.apache.myfaces.shared.renderkit.html.HTML.TABLE_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT435Medium
org.apache.myfaces.shared.renderkit.html.HTML.TEXTAREA_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT444Medium
org.apache.myfaces.shared.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT451Medium
org.apache.myfaces.shared.renderkit.html.HTML.TEXTAREA_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT455Medium
org.apache.myfaces.shared.renderkit.html.HTML.UL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT492Medium
org.apache.myfaces.shared.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT130Medium
org.apache.myfaces.shared.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT117Medium
org.apache.myfaces.shared.renderkit.html.HTML.UNIVERSAL_ATTRIBUTES_WITHOUT_STYLE_AND_TITLE should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT125Medium
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT366Low
org.apache.myfaces.shared.renderkit.html.HTML.BUTTON_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT370Low
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT148Low
org.apache.myfaces.shared.renderkit.html.HTML.COMMON_FIELD_PASSTROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT180Low
org.apache.myfaces.shared.renderkit.html.HTML.IMG_PASSTHROUGH_ATTRIBUTES_WITHOUT_ONMOUSEOVER_AND_ONMOUSEOUT should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT304Low
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT465Low
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_FILE_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT469Low
org.apache.myfaces.shared.renderkit.html.HTML.INPUT_PASSTHROUGH_ATTRIBUTES_WITHOUT_DISABLED_AND_ONFOCUS_AND_ONCLICK should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT335Low
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT396Low
org.apache.myfaces.shared.renderkit.html.HTML.LABEL_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT400Low
org.apache.myfaces.shared.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT496Low
org.apache.myfaces.shared.renderkit.html.HTML.UL_PASSTHROUGH_ATTRIBUTES_WITHOUT_EVENTS should be moved out of an interface and made package protectedMALICIOUS_CODEMS_OOI_PKGPROTECT500Low

org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase

BugCategoryDetailsLinePriority
Dead store to externalContext in org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase.encodeEnd(FacesContext, UIComponent)STYLEDLS_DEAD_LOCAL_STORE184Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase.encodeEnd(FacesContext, UIComponent) invokes toString() method on a StringPERFORMANCEDM_STRING_TOSTRING220Low
Private method org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase.getImage(UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD717-721Low
Private method org.apache.myfaces.shared.renderkit.html.HtmlButtonRendererBase.hasSubmittingBehavior(Map, String) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD333-344Low

org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared.renderkit.html.HtmlCheckboxRendererBase.renderGroupOrItemCheckbox(FacesContext, UIComponent, SelectItem, boolean, Set, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST248Low

org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.decode(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST266Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIForm in org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.encodeBegin(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low
Private method org.apache.myfaces.shared.renderkit.html.HtmlFormRendererBase.getAcceptCharset(UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD320-324Medium

org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.html.HtmlPanelGroup in org.apache.myfaces.shared.renderkit.html.HtmlGroupRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low

org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase

BugCategoryDetailsLinePriority
Private method org.apache.myfaces.shared.renderkit.html.HtmlLinkRendererBase.renderLinkParameter(String, Object, StringBuilder, String, UIComponent) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD1271-1283Low

org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST65Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST449Low
Unchecked/unconfirmed cast from javax.faces.model.SelectItem to javax.faces.model.SelectItemGroup in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean, Integer)STYLEBC_UNCONFIRMED_CAST222Low
Load of known null value in org.apache.myfaces.shared.renderkit.html.HtmlRadioRendererBase.renderGroupOrItemRadio(FacesContext, UIComponent, SelectItem, Object, Converter, boolean, Integer)STYLENP_LOAD_OF_KNOWN_NULL_VALUE248Medium

org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.findUIOutputConverterFailSafe(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST511Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.findUISelectManyConverterFailsafe(FacesContext, UIComponent, boolean)STYLEBC_UNCONFIRMED_CAST493Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectMany in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST447Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UISelectOne in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSubmittedOrSelectedValuesAsSet(boolean, UIComponent, FacesContext, Converter)STYLEBC_UNCONFIRMED_CAST458Low
org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.isTrue(Object) invokes inefficient Boolean constructor; use Boolean.valueOf(...) insteadPERFORMANCEDM_BOOLEAN_CTOR206Medium
public static org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getSupportedContentTypes() may expose internal representation by returning HtmlRendererUtils.SUPPORTED_CONTENT_TYPESMALICIOUS_CODEMS_EXPOSE_REP1823Medium
Method call in org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.renderDisplayValueOnlyForSelects(FacesContext, UIComponent, boolean) passes null for nonnull parameter of renderSelectOptionsAsText(FacesContext, UIComponent, Converter, Set, List, boolean)CORRECTNESSNP_NULL_PARAM_DEREF1044Medium
Private method org.apache.myfaces.shared.renderkit.html.HtmlRendererUtils.getClientBehaviorScript(FacesContext, UIComponent, String, Map, HtmlRendererUtils$ScriptContext, Collection) is never calledPERFORMANCEUPM_UNCALLED_PRIVATE_METHOD1941Medium

org.apache.myfaces.shared.renderkit.html.HtmlResponseWriterImpl

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE240Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE764Low

org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlSecretRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST238Low

org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeChildren(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST212Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeEnd(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST911Low
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIData in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.encodeInnerHtml(FacesContext, UIComponent)STYLEBC_UNCONFIRMED_CAST363Low
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderColumnFooterCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1372Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderColumnHeaderCell(FacesContext, ResponseWriter, UIComponent, UIComponent, String, int) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1317Medium
Method org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderTableHeaderOrFooterRow(FacesContext, ResponseWriter, UIComponent, UIComponent, String, String, int, boolean) invokes inefficient new Integer(int) constructor; use Integer.valueOf(int) insteadPERFORMANCEDM_NUMBER_CTOR1146Medium
Redundant nullcheck of elemName, which is known to be non-null in org.apache.myfaces.shared.renderkit.html.HtmlTableRendererBase.renderFacet(FacesContext, ResponseWriter, UIComponent, boolean)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE1009Low

org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST355Low
Check for sign of bitwise operation in org.apache.myfaces.shared.renderkit.html.HtmlTextRendererBase.renderOutput(FacesContext, UIComponent)BAD_PRACTICEBIT_SIGNED_CHECK116Medium

org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase

BugCategoryDetailsLinePriority
Unchecked/unconfirmed cast from javax.faces.component.UIComponent to javax.faces.component.UIOutput in org.apache.myfaces.shared.renderkit.html.HtmlTextareaRendererBase.getConvertedValue(FacesContext, UIComponent, Object)STYLEBC_UNCONFIRMED_CAST211Low

org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder

BugCategoryDetailsLinePriority
Dead store to builder in org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder.percentEncodeNonUsAsciiCharacter(Writer, char, String)STYLEDLS_DEAD_LOCAL_STORE1165High
Redundant nullcheck of app which is known to be null in org.apache.myfaces.shared.renderkit.html.util.HTMLEncoder.encodeURIAtributte(Writer, String, String)STYLERCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE1088Medium

org.apache.myfaces.shared.renderkit.html.util.JavascriptUtils

BugCategoryDetailsLinePriority
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE159Low

org.apache.myfaces.shared.resource.BaseResourceHandlerSupport

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared.resource.BaseResourceHandlerSupport.getResourceLoaders() return a zero length array rather than null?STYLEPZLA_PREFER_ZERO_LENGTH_ARRAYS65Low
Redundant nullcheck of mapping, which is known to be non-null in org.apache.myfaces.shared.resource.BaseResourceHandlerSupport.calculateResourceBasePath(FacesContext)STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE73Low
Redundant nullcheck of mapping, which is known to be non-null in org.apache.myfaces.shared.resource.BaseResourceHandlerSupport.getMapping()STYLERCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE135Low

org.apache.myfaces.shared.resource.ResourceLoader$VersionComparator

BugCategoryDetailsLinePriority
Should org.apache.myfaces.shared.resource.ResourceLoader$VersionComparator be a _static_ inner class?PERFORMANCESIC_INNER_SHOULD_BE_STATIC87-148Medium

org.apache.myfaces.shared.resource.ResourceLoaderUtils

BugCategoryDetailsLinePriority
Method org.apache.myfaces.shared.resource.ResourceLoaderUtils.parseDateHeader(String) invokes inefficient new Long(long) constructor; use Long.valueOf(long) insteadPERFORMANCEDM_NUMBER_CTOR75Medium

org.apache.myfaces.shared.resource.ValueExpressionFilterInputStream

BugCategoryDetailsLinePriority
Unwritten field: org.apache.myfaces.shared.resource.ValueExpressionFilterInputStream.libraryNameCORRECTNESSUWF_UNWRITTEN_FIELD121Medium
Unwritten field: org.apache.myfaces.shared.resource.ValueExpressionFilterInputStream.resourceNameCORRECTNESSUWF_UNWRITTEN_FIELD121Medium

org.apache.myfaces.shared.test.ClassElementHandler

BugCategoryDetailsLinePriority
ClassElementHandler.buffer not initialized in constructorSTYLEUWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORNot availableLow

org.apache.myfaces.shared.trace.TracingIterator

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.trace.TracingIterator.next() can't throw NoSuchElementExceptionBAD_PRACTICEIT_NO_SUCH_ELEMENT69Low

org.apache.myfaces.shared.util.ClassUtils

BugCategoryDetailsLinePriority
Dead store to plugins in org.apache.myfaces.shared.util.ClassUtils.classForName(String)STYLEDLS_DEAD_LOCAL_STORE170Medium
org.apache.myfaces.shared.util.ClassUtils.classLoadingExtensions should be package protectedMALICIOUS_CODEMS_PKGPROTECT73Medium

org.apache.myfaces.shared.util.ConcurrentLRUCache

BugCategoryDetailsLinePriority
Dead store to newNewestEntry in org.apache.myfaces.shared.util.ConcurrentLRUCache.markAndSweep()STYLEDLS_DEAD_LOCAL_STORE350Low
integral division result cast to double or float in new org.apache.myfaces.shared.util.ConcurrentLRUCache(int, int)STYLEICAST_IDIV_CAST_TO_DOUBLE92Medium
new org.apache.myfaces.shared.util.ConcurrentLRUCache(int, int, int, int, boolean, boolean, ConcurrentLRUCache$EvictionListener) invokes org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread.start()MT_CORRECTNESSSC_START_IN_CTOR86Medium

org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread

BugCategoryDetailsLinePriority
Inconsistent synchronization of org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread.stop; locked 66% of timeMT_CORRECTNESSIS2_INCONSISTENT_SYNC779Medium
Naked notify in org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread.wakeThread()MT_CORRECTNESSNN_NAKED_NOTIFY796Medium
Using notify rather than notifyAll in org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread.stopThread()MT_CORRECTNESSNO_NOTIFY_NOT_NOTIFYALL805Low
Using notify rather than notifyAll in org.apache.myfaces.shared.util.ConcurrentLRUCache$CleanupThread.wakeThread()MT_CORRECTNESSNO_NOTIFY_NOT_NOTIFYALL796Low

org.apache.myfaces.shared.util.ExceptionUtils

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.ExceptionUtils.getExceptions(Throwable)STYLEREC_CATCH_EXCEPTION60Low

org.apache.myfaces.shared.util.StateUtils

BugCategoryDetailsLinePriority
instanceof will always return true in org.apache.myfaces.shared.util.StateUtils.getMacSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF940Medium
instanceof will always return true in org.apache.myfaces.shared.util.StateUtils.getSecret(ExternalContext), since all javax.crypto.SecretKey are instances of javax.crypto.SecretKeySTYLEBC_VACUOUS_INSTANCEOF795Medium
Dead store of null to baos in org.apache.myfaces.shared.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL350Low
Dead store of null to gzip in org.apache.myfaces.shared.util.StateUtils.compress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL349Low
Dead store of null to bais in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL421Low
Dead store of null to baos in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL420Low
Dead store of null to gis in org.apache.myfaces.shared.util.StateUtils.decompress(byte[])STYLEDLS_DEAD_LOCAL_STORE_OF_NULL422Low
Dead store of null to outputStream in org.apache.myfaces.shared.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL278Low
Dead store of null to writer in org.apache.myfaces.shared.util.StateUtils.getAsByteArray(Object, ExternalContext)STYLEDLS_DEAD_LOCAL_STORE_OF_NULL277Low
Random object created and used only once in org.apache.myfaces.shared.util.StateUtils.findMacSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE990High
Random object created and used only once in org.apache.myfaces.shared.util.StateUtils.findSecret(String, String)BAD_PRACTICEDMI_RANDOM_USED_ONLY_ONCE845High
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE671Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE683Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE649Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE634Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE865Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE878Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE954Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE966Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE809Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE821Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE911Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE766Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE728Low
Use of non-localized String.toUpperCase() or String.toLowerCaseI18NDM_CONVERT_CASE193Low
Null pointer dereference of System.out in org.apache.myfaces.shared.util.StateUtils.main(String[])CORRECTNESSNP_ALWAYS_NULL624High
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.decrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION494Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.encrypt(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION332Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StateUtils.getAsObject(byte[], ExternalContext)STYLEREC_CATCH_EXCEPTION556Low

org.apache.myfaces.shared.util.StreamCharBuffer$StreamCharBufferSubChunkReader

BugCategoryDetailsLinePriority
Unread field: org.apache.myfaces.shared.util.StreamCharBuffer$StreamCharBufferSubChunkReader.parentPERFORMANCEURF_UNREAD_FIELD1909Medium

org.apache.myfaces.shared.util.StringCharArrayAccessor

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.util.StringCharArrayAccessor.createString(char[]) invokes inefficient new String() constructorPERFORMANCEDM_STRING_VOID_CTOR195Medium
org.apache.myfaces.shared.util.StringCharArrayAccessor.<static initializer>() invokes reflect.Field.setAccessible(boolean), which should be invoked from within a doPrivileged blockBAD_PRACTICEDP_DO_INSIDE_DO_PRIVILEGED65Low
Null pointer dereference of System.err in org.apache.myfaces.shared.util.StringCharArrayAccessor.<static initializer>()CORRECTNESSNP_ALWAYS_NULL76High
Null pointer dereference of System.err in org.apache.myfaces.shared.util.StringCharArrayAccessor.handleError(Exception)CORRECTNESSNP_ALWAYS_NULL232High
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StringCharArrayAccessor.<static initializer>()STYLEREC_CATCH_EXCEPTION73Low
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.util.StringCharArrayAccessor.createString(char[])STYLEREC_CATCH_EXCEPTION216Low

org.apache.myfaces.shared.util.servlet.SourceCodeServlet

BugCategoryDetailsLinePriority
org.apache.myfaces.shared.util.servlet.SourceCodeServlet is Serializable; consider declaring a serialVersionUIDBAD_PRACTICESE_NO_SERIALVERSIONID25-61Low

org.apache.myfaces.shared.view.JspViewDeclarationLanguageBase

BugCategoryDetailsLinePriority
Dead store to response in org.apache.myfaces.shared.view.JspViewDeclarationLanguageBase.getResponseSwitch(Object)STYLEDLS_DEAD_LOCAL_STORE424High
Dead store to stateManager in org.apache.myfaces.shared.view.JspViewDeclarationLanguageBase.isViewStateAlreadyEncoded(FacesContext)STYLEDLS_DEAD_LOCAL_STORE255Medium

org.apache.myfaces.shared.webapp.webxml.WebXmlParser

BugCategoryDetailsLinePriority
Exception is caught when Exception is not thrown in org.apache.myfaces.shared.webapp.webxml.WebXmlParser.parse()STYLEREC_CATCH_EXCEPTION114Low