SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.9.4
Threshold is medium
Effort is max
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 21 | 6 | 0 | 0 |
Files
org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration.getBuffering() may expose internal representation by returning SyslogAuditEventHandlerConfiguration.buffering | MALICIOUS_CODE | EI_EXPOSE_REP | 214 | Medium |
| org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration.getSeverityFieldMappings() may expose internal representation by returning SyslogAuditEventHandlerConfiguration.severityFieldMappings | MALICIOUS_CODE | EI_EXPOSE_REP | 195 | Medium |
| org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration.setBufferingConfiguration(SyslogAuditEventHandlerConfiguration$EventBufferingConfiguration) may expose internal representation by storing an externally mutable object into SyslogAuditEventHandlerConfiguration.buffering | MALICIOUS_CODE | EI_EXPOSE_REP2 | 224 | Medium |
| org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration.setSeverityFieldMappings(List) may expose internal representation by storing an externally mutable object into SyslogAuditEventHandlerConfiguration.severityFieldMappings | MALICIOUS_CODE | EI_EXPOSE_REP2 | 205 | Medium |
org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration$EventBufferingConfiguration
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unread field: org.forgerock.audit.handlers.syslog.SyslogAuditEventHandlerConfiguration$EventBufferingConfiguration.maxSize | PERFORMANCE | URF_UNREAD_FIELD | 317 | Medium |
org.forgerock.audit.handlers.syslog.SyslogFormatter$StructuredDataFormatter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class org.forgerock.audit.handlers.syslog.SyslogFormatter$StructuredDataFormatter at new org.forgerock.audit.handlers.syslog.SyslogFormatter$StructuredDataFormatter(String, String, JsonValue) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 278 | Medium |