FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is medium
Effort is min
Files
| Class | Bugs |
|---|---|
| org.apache.river.tool.ClassDep$Compare | 1 |
| org.apache.river.tool.classdepend.AbstractDependencyVisitor | 1 |
| org.apache.river.tool.classdepend.ClassDepend | 1 |
org.apache.river.tool.ClassDep$Compare
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| org.apache.river.tool.ClassDep$Compare implements Comparator but not Serializable | BAD_PRACTICE | SE_COMPARATOR_SHOULD_BE_SERIALIZABLE | 817-823 | Medium |
org.apache.river.tool.classdepend.AbstractDependencyVisitor
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in org.apache.river.tool.classdepend.AbstractDependencyVisitor.addType(Type) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 151-156 | Medium |
org.apache.river.tool.classdepend.ClassDepend
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new org.apache.river.tool.classdepend.ClassDepend(String, String) creates a java.net.URLClassLoader classloader, which should be performed within a doPrivileged block | MALICIOUS_CODE | DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED | 226 | Medium |