| Violation | Line |
|---|---|
| DE: org.apache.turbine.Turbine.handleException(org.apache.turbine.util.RunData,javax.servlet.http.HttpServletResponse,Throwable) might ignore java.lang.Exception | 1021 |
| Dm: org.apache.turbine.Turbine.destroy() forces garbage collection; extremely dubious except in benchmarking code | 632 |
| ST: Write to static field org.apache.turbine.Turbine.initFailure from instance method org.apache.turbine.Turbine.init() | 214 |
| ST: Write to static field org.apache.turbine.Turbine.firstInit from instance method org.apache.turbine.Turbine.destroy() | 634 |
| ST: Write to static field org.apache.turbine.Turbine.firstDoGet from instance method org.apache.turbine.Turbine.destroy() | 635 |
| DLS: Dead store to local variable in method org.apache.turbine.Turbine.configure(javax.servlet.ServletConfig,javax.servlet.ServletContext) | 293 |
| REC: Method org.apache.turbine.Turbine.handleException(org.apache.turbine.util.RunData,javax.servlet.http.HttpServletResponse,Throwable) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 1056 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 160 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 163 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 166 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 201 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 202 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 389 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 670 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 685 |
| MTIA: Class org.apache.turbine.Turbine extends Servlet class and uses instance variables. | 769 |
| Violation | Line |
|---|---|
| CN: clone method org.apache.turbine.util.ServerData.clone() does not call super.clone() | 136 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.util.ObjectUtils.deserialize(byte[]) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 158 |
| Violation | Line |
|---|---|
| SA: Self assignment of local variable in org.apache.turbine.util.ServletUtils.expandRelative(javax.servlet.ServletConfig,String) | 99 |
| Violation | Line |
|---|---|
| HE: org.apache.turbine.util.StringStackBuffer defines equals and uses Object.hashCode() | 0 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.util.ContentURI.init(RunData) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 94 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.modules.ActionEvent.formatString(String) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 229 |
| SA: Self assignment of local variable in org.apache.turbine.modules.ActionEvent.formatString(String) | 232 |
| Violation | Line |
|---|---|
| EI: org.apache.turbine.services.template.BaseTemplateEngineService.getTemplateEngineServiceConfiguration() may expose internal representation by returning org.apache.turbine.services.template.BaseTemplateEngineService.configuration | 64 |
| MF: Class org.apache.turbine.services.template.BaseTemplateEngineService defines field that obscures superclass field org.apache.turbine.services.BaseService.configuration | 0 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.naming.TurbineNamingService.init(org.apache.turbine.util.RunData) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 158 |
| Violation | Line |
|---|---|
| Nm: The method name org.apache.turbine.util.pool.RecyclableSupport.Recyclable() doesn't start with an lower case letter | 39 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.pool.TurbinePoolService$PoolBuffer.poll(Object[],String[]) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 226 |
| IS2: Inconsistent synchronization of org.apache.turbine.services.pool.TurbinePoolService$PoolBuffer.recyclers; locked 75% of time | 286 |
| Violation | Line |
|---|---|
| SA: Self assignment of local variable in org.apache.turbine.services.pool.TurbinePoolService.getCapacity(String) | 551 |
| SA: Self assignment of local variable in org.apache.turbine.services.pool.TurbinePoolService.setCapacity(String,int) | 574 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.pool.TurbinePoolService.factoryService | 0 |
| Violation | Line |
|---|---|
| DE: org.apache.turbine.services.intake.TurbineIntakeService.getFieldSetter(String,String) might ignore java.lang.Exception | 705 |
| DE: org.apache.turbine.services.intake.TurbineIntakeService.getFieldGetter(String,String) might ignore java.lang.Exception | 790 |
| RV: org.apache.turbine.services.intake.TurbineIntakeService.saveSerialized(String,java.util.Map) ignores return value of java.io.File.createNewFile() | 451 |
| RV: org.apache.turbine.services.intake.TurbineIntakeService.releaseGroup(org.apache.turbine.services.intake.model.Group) ignores return value of org.apache.turbine.services.intake.IntakeException.<init>(String,Throwable) | 570 |
| SA: Self assignment of local variable in org.apache.turbine.services.intake.TurbineIntakeService.init() | 176 |
| ITA: Method org.apache.turbine.services.intake.TurbineIntakeService.getGroupNames() uses Collection.toArray() with zero-length array argument | 606 |
| DLS: Dead store to local variable in method org.apache.turbine.services.intake.TurbineIntakeService.saveSerialized(String,java.util.Map) | 476 |
| WMI: Method org.apache.turbine.services.intake.TurbineIntakeService.init() makes inefficient use of keySet iterator instead of entrySet iterator | 239 |
| REC: Method org.apache.turbine.services.intake.TurbineIntakeService.init() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 274 |
| REC: Method org.apache.turbine.services.intake.TurbineIntakeService.loadSerialized(String,long) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 398 |
| REC: Method org.apache.turbine.services.intake.TurbineIntakeService.saveSerialized(String,java.util.Map) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 480 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.getterMap | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.groupKeyMap | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.groupNameMap | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.groupNames | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.keyedPools | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.intake.TurbineIntakeService.setterMap | 0 |
| Violation | Line |
|---|---|
| RCN: Redundant nullcheck of value known to be non-null org.apache.turbine.services.pull.TurbinePullService.populateWithSessionTools(java.util.List,org.apache.velocity.context.Context,org.apache.turbine.util.RunData,org.apache.turbine.om.security.User) | 512 |
| Violation | Line |
|---|---|
| DE: org.apache.turbine.services.velocity.TurbineVelocityService.handleRequest(org.apache.velocity.context.Context,String,java.io.OutputStream) might ignore java.lang.Exception | 343 |
| DE: org.apache.turbine.services.velocity.TurbineVelocityService.handleRequest(org.apache.velocity.context.Context,String,java.io.Writer) might ignore java.lang.Exception | 383 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.services.security.BaseSecurityService.encryptPassword(String,String) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 151 |
| DC: Possible doublecheck on org.apache.turbine.services.security.BaseSecurityService.globalGroup in org.apache.turbine.services.security.BaseSecurityService.getGlobalGroup() | 952 |
| No: Using notify rather than notifyAll in org.apache.turbine.services.security.BaseSecurityService.unlockShared() | 906 |
| ITA: Method org.apache.turbine.services.security.BaseSecurityService.getUsers(org.apache.torque.util.Criteria) uses Collection.toArray() with zero-length array argument | 727 |
| PS: Class org.apache.turbine.services.security.BaseSecurityService exposes synchronization and semaphores in its public interface. | 906 |
| Violation | Line |
|---|---|
| PZLA: Should org.apache.turbine.services.factory.TurbineFactoryService.getSignature(Class,Object[],String[]) return a zero length array rather than null? | 454 |
| ST: Write to static field org.apache.turbine.services.factory.TurbineFactoryService.primitiveClasses from instance method org.apache.turbine.services.factory.TurbineFactoryService.<init>() | 62 |
| REC: Method org.apache.turbine.services.factory.TurbineFactoryService.switchObjectContext(Object,ClassLoader) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 490 |
| Violation | Line |
|---|---|
| ST: Write to static field org.apache.turbine.services.uniqueid.TurbineUniqueIdService.turbineId from instance method org.apache.turbine.services.uniqueid.TurbineUniqueIdService.init() | 81 |
| REC: Method org.apache.turbine.services.uniqueid.TurbineUniqueIdService.init() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 87 |
| MS: org.apache.turbine.services.uniqueid.TurbineUniqueIdService.turbineId should be package protected | 0 |
| MS: org.apache.turbine.services.uniqueid.TurbineUniqueIdService.turbineURL isn't final but should be | 0 |
| MS: org.apache.turbine.services.uniqueid.TurbineUniqueIdService.counter should be package protected | 0 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.xmlrpc.TurbineXmlRpcService.init() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 242 |
| Violation | Line |
|---|---|
| ST: Write to static field org.apache.turbine.services.xslt.TurbineXSLTService.tfactory from instance method org.apache.turbine.services.xslt.TurbineXSLTService.init() | 92 |
| UwF: Field not initialized in constructor: org.apache.turbine.services.xslt.TurbineXSLTService.tfactory | 0 |
| Violation | Line |
|---|---|
| BC: Unchecked/unconfirmed cast from org.apache.turbine.services.cache.CachedObject to class org.apache.turbine.services.cache.RefreshableCachedObject in org.apache.turbine.services.cache.TurbineGlobalCacheService.clearCache() | 296 |
| Violation | Line |
|---|---|
| BC: Unchecked/unconfirmed cast from java.lang.Throwable to class java.util.MissingResourceException in org.apache.turbine.services.localization.TurbineLocalizationService.cacheBundle(String,java.util.Locale) | 365 |
| IS2: Inconsistent synchronization of org.apache.turbine.services.localization.TurbineLocalizationService.bundles; locked 75% of time | 317 |
| Violation | Line |
|---|---|
| EI: org.apache.turbine.services.schedule.BaseJobEntry.getProperty() may expose internal representation by returning org.apache.turbine.services.schedule.BaseJobEntry.property | 299 |
| EI2: org.apache.turbine.services.schedule.BaseJobEntry.setProperty(byte[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.services.schedule.BaseJobEntry.property | 313 |
| BC: Unchecked/unconfirmed cast from org.apache.torque.om.ObjectKey to class org.apache.torque.om.NumberKey in org.apache.turbine.services.schedule.BaseJobEntry.setPrimaryKey(org.apache.torque.om.ObjectKey) | 578 |
| Violation | Line |
|---|---|
| ES: Comparison of String objects using == or != in org.apache.turbine.services.schedule.BaseJobEntryPeer.setDbName(org.apache.torque.util.Criteria) | 843 |
| BC: Unchecked/unconfirmed cast from java.lang.Throwable to class java.lang.Error in org.apache.turbine.services.schedule.BaseJobEntryPeer.initClass(String) | 142 |
| Violation | Line |
|---|---|
| No: Using notify rather than notifyAll in org.apache.turbine.services.schedule.TurbineSchedulerService.restart() | 336 |
| PS: Class org.apache.turbine.services.schedule.TurbineSchedulerService exposes synchronization and semaphores in its public interface. | 336 |
| Violation | Line |
|---|---|
| RCN: Redundant nullcheck of value known to be non-null org.apache.turbine.services.schedule.TurbineNonPersistentSchedulerService.init() | 142 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.avaloncomponent.TurbineAvalonComponentService.initialize() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 192 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.services.upload.BaseUploadService.init() invokes toString() method on a String; just use the String | 57 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.services.upload.TurbineUpload.isAvailable() | 64 |
| Violation | Line |
|---|---|
| Dm: org.apache.turbine.util.parser.BaseValueParser.getBool(String,boolean) invokes dubious Boolean constructor; use Boolean.valueOf(...) instead | 471 |
| PZLA: Should org.apache.turbine.util.parser.BaseValueParser.getParam(String) return a zero length array rather than null? | 1826 |
| Violation | Line |
|---|---|
| EI2: org.apache.turbine.util.parser.DefaultParameterParser.setUploadData(byte[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.parser.DefaultParameterParser.uploadData | 264 |
| EI: org.apache.turbine.util.parser.DefaultParameterParser.getUploadData() may expose internal representation by returning org.apache.turbine.util.parser.DefaultParameterParser.uploadData | 274 |
| PZLA: Should org.apache.turbine.util.parser.DefaultParameterParser.getFileItemParam(String) return a zero length array rather than null? | 395 |
| REC: Method org.apache.turbine.util.parser.DefaultParameterParser.setRequest(javax.servlet.http.HttpServletRequest) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 236 |
| RI: Class org.apache.turbine.util.parser.DefaultParameterParser implements same interface as superclass. | 0 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.util.parser.ParserUtils.convertAndTrim(String,int) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 105 |
| Dm: Method org.apache.turbine.util.parser.ParserUtils.convertAndTrim(String,int) invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 110 |
| Dm: Method org.apache.turbine.util.parser.ParserUtils.getUrlFolding() invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 133 |
| Violation | Line |
|---|---|
| RI: Class org.apache.turbine.util.parser.DefaultCookieParser implements same interface as superclass. | 0 |
| Violation | Line |
|---|---|
| RI: Class org.apache.turbine.util.uri.DataURI implements same interface as superclass. | 0 |
| Violation | Line |
|---|---|
| ITA: Method org.apache.turbine.util.security.RoleSet.getRolesArray() uses Collection.toArray() with zero-length array argument | 195 |
| Violation | Line |
|---|---|
| ITA: Method org.apache.turbine.util.security.PermissionSet.getPermissionsArray() uses Collection.toArray() with zero-length array argument | 197 |
| Violation | Line |
|---|---|
| ITA: Method org.apache.turbine.util.security.GroupSet.getGroupsArray() uses Collection.toArray() with zero-length array argument | 195 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.util.security.TurbineAccessControlList.hasRole(String,String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 209 |
| REC: Method org.apache.turbine.util.security.TurbineAccessControlList.hasRole(String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 277 |
| REC: Method org.apache.turbine.util.security.TurbineAccessControlList.hasPermission(String,String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 344 |
| REC: Method org.apache.turbine.util.security.TurbineAccessControlList.hasPermission(String,org.apache.turbine.om.security.Group) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 364 |
| REC: Method org.apache.turbine.util.security.TurbineAccessControlList.hasPermission(String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 432 |
| Violation | Line |
|---|---|
| DE: org.apache.turbine.util.template.TemplateInfo.setScreenTemplate(String) might ignore java.lang.Exception | 111 |
| Violation | Line |
|---|---|
| EI2: org.apache.turbine.util.template.SelectorBox.<init>(String,Object[],Object[],int,boolean[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.template.SelectorBox.names | 138 |
| EI2: org.apache.turbine.util.template.SelectorBox.<init>(String,Object[],Object[],int,boolean[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.template.SelectorBox.values | 139 |
| EI2: org.apache.turbine.util.template.SelectorBox.<init>(String,Object[],Object[],int,boolean[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.template.SelectorBox.selected | 141 |
| EI2: org.apache.turbine.util.template.SelectorBox.setSelected(boolean[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.template.SelectorBox.selected | 289 |
| Violation | Line |
|---|---|
| HE: org.apache.turbine.util.db.TableColumn defines equals and uses Object.hashCode() | 0 |
| Violation | Line |
|---|---|
| RV: org.apache.turbine.util.db.UUIdGenerator.<init>() checks to see if result of String.indexOf is positive | 102 |
| RV: org.apache.turbine.util.db.UUIdGenerator.<init>() checks to see if result of String.indexOf is positive | 131 |
| IS2: Inconsistent synchronization of org.apache.turbine.util.db.UUIdGenerator.counter; locked 66% of time | 196 |
| Violation | Line |
|---|---|
| EI2: org.apache.turbine.util.mail.ByteArrayDataSource.<init>(byte[],String) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.ByteArrayDataSource.data | 61 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.util.mail.Email.send() | 400 |
| REC: Method org.apache.turbine.util.mail.Email.setFrom(String,String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 228 |
| UwF: Field not initialized in constructor: org.apache.turbine.util.mail.Email.bccList | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.util.mail.Email.ccList | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.util.mail.Email.replyList | 0 |
| UwF: Field not initialized in constructor: org.apache.turbine.util.mail.Email.toList | 0 |
| Violation | Line |
|---|---|
| EI2: org.apache.turbine.util.mail.MailMessage.setBcc(javax.mail.internet.InternetAddress[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.MailMessage.bcc | 474 |
| EI2: org.apache.turbine.util.mail.MailMessage.setCc(javax.mail.internet.InternetAddress[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.MailMessage.cc | 506 |
| EI2: org.apache.turbine.util.mail.MailMessage.setHeaders(java.util.Hashtable) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.MailMessage.headers | 598 |
| EI2: org.apache.turbine.util.mail.MailMessage.setReplyTo(javax.mail.internet.InternetAddress[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.MailMessage.replyTo | 619 |
| EI2: org.apache.turbine.util.mail.MailMessage.setTo(javax.mail.internet.InternetAddress[]) may expose internal representation by storing an externally mutable object into org.apache.turbine.util.mail.MailMessage.to | 651 |
| UR: Uninitialized read of org.apache.turbine.util.mail.MailMessage.cc in org.apache.turbine.util.mail.MailMessage.<init>(String,String,String,String,String,String,String,boolean) | 181 |
| Violation | Line |
|---|---|
| EI: org.apache.turbine.util.upload.FileItem.get() may expose internal representation by returning org.apache.turbine.util.upload.FileItem.content | 199 |
| RR: org.apache.turbine.util.upload.FileItem.get() ignores result of java.io.FileInputStream.read(byte[]) | 186 |
| NP: Possible null pointer dereference in org.apache.turbine.util.upload.FileItem.write(String) on exception path | 413 |
| NP: Possible null pointer dereference in org.apache.turbine.util.upload.FileItem.write(String) on exception path | 421 |
| OS: org.apache.turbine.util.upload.FileItem.get() may fail to close stream | 185 |
| REC: Method org.apache.turbine.util.upload.FileItem.get() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 188 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.util.upload.MultipartStream.readBodyData(java.io.OutputStream) | 415 |
| DLS: Dead store to local variable in method org.apache.turbine.util.upload.MultipartStream.discardBodyData() | 486 |
| MS: org.apache.turbine.util.upload.MultipartStream.HEADER_SEPARATOR should be package protected | 0 |
| MS: org.apache.turbine.util.upload.MultipartStream.FIELD_SEPARATOR should be package protected | 0 |
| MS: org.apache.turbine.util.upload.MultipartStream.STREAM_TERMINATOR should be package protected | 0 |
| Violation | Line |
|---|---|
| Nm: The field name org.apache.turbine.util.validation.InputValidator.NullInputError doesn't start with an lower case letter | 0 |
| Nm: The field name org.apache.turbine.util.validation.InputValidator.MaxSizeExceededError doesn't start with an lower case letter | 0 |
| UrF: Unread field: org.apache.turbine.util.validation.InputValidator.argv | 0 |
| Violation | Line |
|---|---|
| EI: org.apache.turbine.om.security.TurbineUser.getCreateDate() may expose internal representation by returning org.apache.turbine.om.security.TurbineUser.createDate | 125 |
| EI: org.apache.turbine.om.security.TurbineUser.getLastAccessDate() may expose internal representation by returning org.apache.turbine.om.security.TurbineUser.lastAccessDate | 140 |
| EI: org.apache.turbine.om.security.TurbineUser.getPermStorage() may expose internal representation by returning org.apache.turbine.om.security.TurbineUser.permStorage | 212 |
| EI2: org.apache.turbine.om.security.TurbineUser.setCreateDate(java.util.Date) may expose internal representation by storing an externally mutable object into org.apache.turbine.om.security.TurbineUser.createDate | 393 |
| EI2: org.apache.turbine.om.security.TurbineUser.setPermStorage(java.util.Hashtable) may expose internal representation by storing an externally mutable object into org.apache.turbine.om.security.TurbineUser.permStorage | 438 |
| EI: org.apache.turbine.om.security.TurbineUser.getTempStorage() may expose internal representation by returning org.apache.turbine.om.security.TurbineUser.tempStorage | 453 |
| EI2: org.apache.turbine.om.security.TurbineUser.setTempStorage(java.util.Hashtable) may expose internal representation by storing an externally mutable object into org.apache.turbine.om.security.TurbineUser.tempStorage | 464 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.modules.actions.LoginUser.doPerform(org.apache.turbine.util.RunData) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 111 |
| Violation | Line |
|---|---|
| WMI: Method org.apache.turbine.modules.actions.InitContextsAction.doPerform(org.apache.turbine.util.RunData) makes inefficient use of keySet iterator instead of entrySet iterator | 86 |
| Violation | Line |
|---|---|
| DE: org.apache.turbine.modules.screens.TemplateScreen.setTemplate(org.apache.turbine.util.RunData,String) might ignore java.lang.Exception | 133 |
| Violation | Line |
|---|---|
| WMI: Method org.apache.turbine.modules.screens.Error.doBuild(org.apache.turbine.util.RunData) makes inefficient use of keySet iterator instead of entrySet iterator | 74 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.template.mapper.ClassMapper.doMapping(String) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 147 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.services.template.mapper.ScreenDefaultTemplateMapper.doMapping(String) | 79 |
| Violation | Line |
|---|---|
| DE: org.apache.turbine.services.intake.model.Group.setValidProperties(Object) might ignore java.lang.Exception | 398 |
| Violation | Line |
|---|---|
| BC: Unchecked/unconfirmed cast from org.apache.turbine.util.parser.ValueParser to class org.apache.turbine.util.parser.ParameterParser in org.apache.turbine.services.intake.model.FileItemField.init(org.apache.turbine.util.parser.ValueParser) | 119 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.services.intake.validator.LongValidator.assertValidity(String) | 113 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.services.intake.xmlmodel.XmlField.getVariable() invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 323 |
| Violation | Line |
|---|---|
| Dm: Method org.apache.turbine.services.intake.xmlmodel.XmlGroup.getVariable() invokes dubious String.toUpperCase() or String.toLowerCase; use the Locale parameterized version instead | 255 |
| Violation | Line |
|---|---|
| UI: Usage of GetResource in org.apache.turbine.services.intake.transform.DTDResolver.<init>() may be unsafe if class is extended | 58 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.pull.util.UIManager.loadSkin() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 438 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.init(org.apache.commons.configuration.Configuration) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 146 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.buildCriteria(org.apache.turbine.om.security.Role) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 384 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.doUpdate(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 412 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.doInsert(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 438 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.doSelect(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 468 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.doDelete(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 505 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.getPersistenceClass() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 661 |
| REC: Method org.apache.turbine.services.security.torque.RolePeerManager.getNewRole(org.apache.torque.om.Persistent) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 696 |
| BC: Unchecked/unconfirmed cast from org.apache.turbine.om.security.Role to class org.apache.turbine.services.security.torque.TorqueRole in org.apache.turbine.services.security.torque.RolePeerManager.buildCriteria(org.apache.turbine.om.security.Role) | 377 |
| Violation | Line |
|---|---|
| EI: org.apache.turbine.services.security.torque.TorqueUser.getLastAccessDate() may expose internal representation by returning org.apache.turbine.services.security.torque.TorqueUser.lastAccessDate | 531 |
| EI: org.apache.turbine.services.security.torque.TorqueUser.getPermStorage() may expose internal representation by returning org.apache.turbine.services.security.torque.TorqueUser.permStorage | 567 |
| EI2: org.apache.turbine.services.security.torque.TorqueUser.setPermStorage(java.util.Hashtable) may expose internal representation by storing an externally mutable object into org.apache.turbine.services.security.torque.TorqueUser.permStorage | 580 |
| EI: org.apache.turbine.services.security.torque.TorqueUser.getTempStorage() may expose internal representation by returning org.apache.turbine.services.security.torque.TorqueUser.tempStorage | 596 |
| EI2: org.apache.turbine.services.security.torque.TorqueUser.setTempStorage(java.util.Hashtable) may expose internal representation by storing an externally mutable object into org.apache.turbine.services.security.torque.TorqueUser.tempStorage | 609 |
| Violation | Line |
|---|---|
| RI: Class org.apache.turbine.services.security.torque.TorqueGroup implements same interface as superclass. | 0 |
| CD: Class org.apache.turbine.services.security.torque.TorqueGroup has a circular dependency with other classes. | 0 |
| Violation | Line |
|---|---|
| RI: Class org.apache.turbine.services.security.torque.TorqueRole implements same interface as superclass. | 0 |
| CD: Class org.apache.turbine.services.security.torque.TorqueRole has a circular dependency with other classes. | 0 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.init(org.apache.commons.configuration.Configuration) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 146 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.buildCriteria(org.apache.turbine.om.security.Permission) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 404 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.doUpdate(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 432 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.doInsert(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 458 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.doSelect(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 488 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.doDelete(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 526 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.getPersistenceClass() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 682 |
| REC: Method org.apache.turbine.services.security.torque.PermissionPeerManager.getNewPermission(org.apache.torque.om.Persistent) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 716 |
| BC: Unchecked/unconfirmed cast from org.apache.turbine.om.security.Permission to class org.apache.turbine.services.security.torque.TorquePermission in org.apache.turbine.services.security.torque.PermissionPeerManager.buildCriteria(org.apache.turbine.om.security.Permission) | 397 |
| Violation | Line |
|---|---|
| ITA: Method org.apache.turbine.services.security.torque.TorqueUserManager.retrieve(org.apache.torque.util.Criteria) uses Collection.toArray() with zero-length array argument | 189 |
| Violation | Line |
|---|---|
| PZLA: Should org.apache.turbine.services.security.torque.UserPeerManager.getUserObjectdata(org.apache.torque.om.Persistent) return a zero length array rather than null? | 1354 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.init(org.apache.commons.configuration.Configuration) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 281 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.buildCriteria(org.apache.turbine.om.security.User) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 650 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.doUpdate(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 678 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.doInsert(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 704 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.doSelect(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 734 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.doDelete(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 771 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.getPersistenceClass() catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 1461 |
| REC: Method org.apache.turbine.services.security.torque.UserPeerManager.getNewUser(org.apache.torque.om.Persistent) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 1495 |
| BC: Unchecked/unconfirmed cast from org.apache.turbine.om.security.User to class org.apache.turbine.services.security.torque.TorqueUser in org.apache.turbine.services.security.torque.UserPeerManager.buildCriteria(org.apache.turbine.om.security.User) | 643 |
| CD: Class org.apache.turbine.services.security.torque.UserPeerManager has a circular dependency with other classes. | 0 |
| Violation | Line |
|---|---|
| DLS: Dead store to local variable in method org.apache.turbine.services.security.torque.TorqueSecurityService.getGroups(org.apache.torque.util.Criteria) | 506 |
| DLS: Dead store to local variable in method org.apache.turbine.services.security.torque.TorqueSecurityService.getRoles(org.apache.torque.util.Criteria) | 537 |
| DLS: Dead store to local variable in method org.apache.turbine.services.security.torque.TorqueSecurityService.getPermissions(org.apache.torque.util.Criteria) | 568 |
| WMI: Method org.apache.turbine.services.security.torque.TorqueSecurityService.getGroups(org.apache.torque.util.Criteria) makes inefficient use of keySet iterator instead of entrySet iterator | 503 |
| WMI: Method org.apache.turbine.services.security.torque.TorqueSecurityService.getRoles(org.apache.torque.util.Criteria) makes inefficient use of keySet iterator instead of entrySet iterator | 534 |
| WMI: Method org.apache.turbine.services.security.torque.TorqueSecurityService.getPermissions(org.apache.torque.util.Criteria) makes inefficient use of keySet iterator instead of entrySet iterator | 565 |
| Violation | Line |
|---|---|
| REC: Method org.apache.turbine.services.security.torque.GroupPeerManager.init(org.apache.commons.configuration.Configuration) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 129 |
| REC: Method org.apache.turbine.services.security.torque.GroupPeerManager.buildCriteria(org.apache.turbine.om.security.Group) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 348 |
| REC: Method org.apache.turbine.services.security.torque.GroupPeerManager.doUpdate(org.apache.torque.util.Criteria) catches Exception, but Exception is not thrown in the try block and RuntimeException is not explicitly caught | 376 |
| REC: Method org.apache.turbine.services.security.torque.GroupPeerManager.doInsert(org.apache.torque.util.Criteria |