SEI CERT Oracle Secure Coding Standard for Java - Guidelines 06. Methods (MET)

The product uses an API function that does not exist on all versions of the target platform. This could cause portability problems or inconsistencies that allow denial...

The product makes an explicit call to the finalize() method from outside the finalizer.

The product violates secure coding principles for mobile code by declaring a finalize() method public.

The product contains a finalize() method that does not call super.finalize().

The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

The product does not maintain equal hashcodes for equal objects.

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe th...

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommen...