FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is low
Effort is max
Files
org.apache.myfaces.tobago.example.test.Attribute
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Attribute is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-54 | Low |
org.apache.myfaces.tobago.example.test.ClientConfigController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.ClientConfigController.getThemeItems() may expose internal representation by returning ClientConfigController.themeItems | MALICIOUS_CODE | EI_EXPOSE_REP | 133 | Medium |
org.apache.myfaces.tobago.example.test.ClientConfigController.setThemeItems(SelectItem[]) may expose internal representation by storing an externally mutable object into ClientConfigController.themeItems | MALICIOUS_CODE | EI_EXPOSE_REP2 | 137 | Medium |
Class org.apache.myfaces.tobago.example.test.ClientConfigController defines non-transient non-serializable instance field theme | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.tobago.example.test.ClientConfigController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 43-154 | Low |
org.apache.myfaces.tobago.example.test.DateController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.DateController.getOnce() may expose internal representation by returning DateController.once | MALICIOUS_CODE | EI_EXPOSE_REP | 45 | Medium |
org.apache.myfaces.tobago.example.test.DateController.setOnce(Date) may expose internal representation by storing an externally mutable object into DateController.once | MALICIOUS_CODE | EI_EXPOSE_REP2 | 49 | Medium |
org.apache.myfaces.tobago.example.test.DateController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 32-50 | Low |
org.apache.myfaces.tobago.example.test.DirectoryBrowser
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.DirectoryBrowser is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 35-107 | Low |
org.apache.myfaces.tobago.example.test.DynamicBean
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.DynamicBean defines non-transient non-serializable instance field panels | BAD_PRACTICE | SE_BAD_FIELD | Not available | Low |
org.apache.myfaces.tobago.example.test.DynamicBean is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 28-59 | Low |
org.apache.myfaces.tobago.example.test.DynamicPanel3
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.DynamicPanel3 is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-43 | Low |
org.apache.myfaces.tobago.example.test.Immediate
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Immediate.getSelectItems() may expose internal representation by returning Immediate.selectItems | MALICIOUS_CODE | EI_EXPOSE_REP | 70 | Medium |
org.apache.myfaces.tobago.example.test.Immediate.getSelectMany() may expose internal representation by returning Immediate.selectMany | MALICIOUS_CODE | EI_EXPOSE_REP | 78 | Medium |
org.apache.myfaces.tobago.example.test.Immediate.setSelectMany(Integer[]) may expose internal representation by storing an externally mutable object into Immediate.selectMany | MALICIOUS_CODE | EI_EXPOSE_REP2 | 74 | Medium |
org.apache.myfaces.tobago.example.test.Immediate is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 29-78 | Low |
org.apache.myfaces.tobago.example.test.InBean
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.InBean is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-44 | Low |
org.apache.myfaces.tobago.example.test.InputSuggestController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.InputSuggestController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 31-45 | Low |
org.apache.myfaces.tobago.example.test.KillSession
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Found reliance on default encoding in org.apache.myfaces.tobago.example.test.KillSession.doGet(HttpServletRequest, HttpServletResponse): String.getBytes() | I18N | DM_DEFAULT_ENCODING | 38 | High |
org.apache.myfaces.tobago.example.test.KillSession is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 29-39 | Low |
org.apache.myfaces.tobago.example.test.Messages
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Messages is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 26-42 | Low |
org.apache.myfaces.tobago.example.test.PageItem
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.PageItem defines compareTo(Object) and uses Object.equals() | BAD_PRACTICE | EQ_COMPARETO_USE_OBJECT_EQUALS | 61 | Medium |
org.apache.myfaces.tobago.example.test.Partially
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Partially is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 30-71 | Low |
org.apache.myfaces.tobago.example.test.PopupReferenceController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.PopupReferenceController defines non-transient non-serializable instance field entry | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
Class org.apache.myfaces.tobago.example.test.PopupReferenceController defines non-transient non-serializable instance field sheet | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
org.apache.myfaces.tobago.example.test.PopupReferenceController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 34-79 | Low |
org.apache.myfaces.tobago.example.test.Progress
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Progress is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 31-41 | Low |
org.apache.myfaces.tobago.example.test.Reload
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Reload is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-49 | Low |
org.apache.myfaces.tobago.example.test.ResourceBean
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Uninitialized read of resources in new org.apache.myfaces.tobago.example.test.ResourceBean() | CORRECTNESS | UR_UNINIT_READ | 32 | Low |
org.apache.myfaces.tobago.example.test.ScriptEvent
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.ScriptEvent defines non-transient non-serializable instance field items | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
org.apache.myfaces.tobago.example.test.ScriptEvent is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 26-48 | Low |
org.apache.myfaces.tobago.example.test.ScriptEventItem
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.ScriptEventItem.getTime() may expose internal representation by returning ScriptEventItem.time | MALICIOUS_CODE | EI_EXPOSE_REP | 45 | Medium |
org.apache.myfaces.tobago.example.test.ScriptEventServlet
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Found reliance on default encoding in org.apache.myfaces.tobago.example.test.ScriptEventServlet.doGet(HttpServletRequest, HttpServletResponse): String.getBytes() | I18N | DM_DEFAULT_ENCODING | 55 | High |
org.apache.myfaces.tobago.example.test.ScriptEventServlet is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 32-56 | Low |
org.apache.myfaces.tobago.example.test.SelectBooleanCheckboxBean
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.SelectBooleanCheckboxBean is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-79 | Low |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.SelectManyListboxBean.getCurrencyArray() may expose internal representation by returning SelectManyListboxBean.currencyArray | MALICIOUS_CODE | EI_EXPOSE_REP | 94 | Medium |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean.getCurrencyItems() may expose internal representation by returning SelectManyListboxBean.currencyItems | MALICIOUS_CODE | EI_EXPOSE_REP | 118 | Medium |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean.getStringArray() may expose internal representation by returning SelectManyListboxBean.stringArray | MALICIOUS_CODE | EI_EXPOSE_REP | 62 | Medium |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean.setCurrencyArray(Currency[]) may expose internal representation by storing an externally mutable object into SelectManyListboxBean.currencyArray | MALICIOUS_CODE | EI_EXPOSE_REP2 | 98 | Medium |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean.setStringArray(String[]) may expose internal representation by storing an externally mutable object into SelectManyListboxBean.stringArray | MALICIOUS_CODE | EI_EXPOSE_REP2 | 66 | Medium |
org.apache.myfaces.tobago.example.test.SelectManyListboxBean is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 34-118 | Low |
org.apache.myfaces.tobago.example.test.SheetController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.SheetController.getSolarArray() may expose internal representation by returning SheetController.solarArray | MALICIOUS_CODE | EI_EXPOSE_REP | 53 | Medium |
org.apache.myfaces.tobago.example.test.SheetController.getSolarArray3() may expose internal representation by returning SheetController.solarArray3 | MALICIOUS_CODE | EI_EXPOSE_REP | 57 | Medium |
Return value of init3() ignored, but method has no side effect | STYLE | RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT | 38 | Medium |
Class org.apache.myfaces.tobago.example.test.SheetController defines non-transient non-serializable instance field localeList | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
Class org.apache.myfaces.tobago.example.test.SheetController defines non-transient non-serializable instance field solarArray | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
Class org.apache.myfaces.tobago.example.test.SheetController defines non-transient non-serializable instance field solarArray3 | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
Class org.apache.myfaces.tobago.example.test.SheetController defines non-transient non-serializable instance field undefined | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
org.apache.myfaces.tobago.example.test.UndefinedRowCountDataModel stored into non-transient field SheetController.undefined | BAD_PRACTICE | SE_BAD_FIELD_STORE | 35 | High |
org.apache.myfaces.tobago.example.test.SheetController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 33-65 | Low |
org.apache.myfaces.tobago.example.test.SheetSortController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.SheetSortController defines non-transient non-serializable instance field list | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
org.apache.myfaces.tobago.example.test.SheetSortController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 34-52 | Low |
org.apache.myfaces.tobago.example.test.SheetSortController$Entry
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.SheetSortController$Entry.getFifth() may expose internal representation by returning SheetSortController$Entry.fifth | MALICIOUS_CODE | EI_EXPOSE_REP | 126 | Medium |
org.apache.myfaces.tobago.example.test.SheetSortController$Entry.setFifth(Date) may expose internal representation by storing an externally mutable object into SheetSortController$Entry.fifth | MALICIOUS_CODE | EI_EXPOSE_REP2 | 130 | Medium |
org.apache.myfaces.tobago.example.test.Shuttle
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.Shuttle is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 32-45 | Low |
org.apache.myfaces.tobago.example.test.TestPageFilter
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.TestPageFilter.ALLOWED is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 29 | Medium |
org.apache.myfaces.tobago.example.test.TestPageFilter.DISABLED is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 53 | Medium |
org.apache.myfaces.tobago.example.test.TestPageFilter.HIDDEN is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 35 | Medium |
org.apache.myfaces.tobago.example.test.TreeController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.TreeController defines non-transient non-serializable instance field treeInSheet | BAD_PRACTICE | SE_BAD_FIELD | Not available | High |
org.apache.myfaces.tobago.model.TreeNodeDataModel stored into non-transient field TreeController.treeInSheet | BAD_PRACTICE | SE_BAD_FIELD_STORE | 42 | High |
org.apache.myfaces.tobago.example.test.TreeController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 36-77 | Low |
org.apache.myfaces.tobago.example.test.TrueAndFalseList
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.TrueAndFalseList is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 27-30 | Low |
org.apache.myfaces.tobago.example.test.Upload
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
Class org.apache.myfaces.tobago.example.test.Upload defines non-transient non-serializable instance field part | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
org.apache.myfaces.tobago.example.test.Upload is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 31-59 | Low |
org.apache.myfaces.tobago.example.test.ZIndexController
Bug | Category | Details | Line | Priority |
---|---|---|---|---|
org.apache.myfaces.tobago.example.test.ZIndexController is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 24-43 | Low |