/home/tomcat/temp/ks-1.1-perf/ks-security/ks-sts/target/classes/home/tomcat/.m2/repository/org/apache/maven/reporting/maven-reporting-impl/2.0/maven-reporting-impl-2.0.jar/home/tomcat/.m2/repository/org/codehaus/plexus/plexus-utils/1.5.1/plexus-utils-1.5.1.jar/home/tomcat/.m2/repository/commons-validator/commons-validator/1.1.4/commons-validator-1.1.4.jar/home/tomcat/.m2/repository/oro/oro/2.0.7/oro-2.0.7.jar/home/tomcat/.m2/repository/doxia/doxia-core/1.0-alpha-4/doxia-core-1.0-alpha-4.jar/home/tomcat/.m2/repository/org/apache/maven/shared/maven-doxia-tools/1.0/maven-doxia-tools-1.0.jar/home/tomcat/.m2/repository/commons-io/commons-io/1.4/commons-io-1.4.jar/home/tomcat/.m2/repository/org/apache/maven/doxia/doxia-decoration-model/1.0-alpha-11/doxia-decoration-model-1.0-alpha-11.jar/home/tomcat/.m2/repository/org/codehaus/plexus/plexus-i18n/1.0-beta-7/plexus-i18n-1.0-beta-7.jar/home/tomcat/.m2/repository/com/google/code/findbugs/findbugs-ant/1.3.9/findbugs-ant-1.3.9.jar/home/tomcat/.m2/repository/com/google/code/findbugs/findbugs/1.3.9/findbugs-1.3.9.jar/home/tomcat/.m2/repository/com/google/code/findbugs/bcel/1.3.9/bcel-1.3.9.jar/home/tomcat/.m2/repository/com/google/code/findbugs/jsr305/1.3.9/jsr305-1.3.9.jar/home/tomcat/.m2/repository/com/google/code/findbugs/jFormatString/1.3.9/jFormatString-1.3.9.jar/home/tomcat/.m2/repository/com/google/code/findbugs/annotations/1.3.9/annotations-1.3.9.jar/home/tomcat/.m2/repository/dom4j/dom4j/1.6.1/dom4j-1.6.1.jar/home/tomcat/.m2/repository/xml-apis/xml-apis/1.0.b2/xml-apis-1.0.b2.jar/home/tomcat/.m2/repository/jaxen/jaxen/1.1.1/jaxen-1.1.1.jar/home/tomcat/.m2/repository/jdom/jdom/1.0/jdom-1.0.jar/home/tomcat/.m2/repository/xerces/xercesImpl/2.6.2/xercesImpl-2.6.2.jar/home/tomcat/.m2/repository/xom/xom/1.0/xom-1.0.jar/home/tomcat/.m2/repository/xerces/xmlParserAPIs/2.6.2/xmlParserAPIs-2.6.2.jar/home/tomcat/.m2/repository/xalan/xalan/2.6.0/xalan-2.6.0.jar/home/tomcat/.m2/repository/com/ibm/icu/icu4j/2.6.1/icu4j-2.6.1.jar/home/tomcat/.m2/repository/asm/asm/3.1/asm-3.1.jar/home/tomcat/.m2/repository/asm/asm-analysis/3.1/asm-analysis-3.1.jar/home/tomcat/.m2/repository/asm/asm-tree/3.1/asm-tree-3.1.jar/home/tomcat/.m2/repository/asm/asm-commons/3.1/asm-commons-3.1.jar/home/tomcat/.m2/repository/asm/asm-util/3.1/asm-util-3.1.jar/home/tomcat/.m2/repository/asm/asm-xml/3.1/asm-xml-3.1.jar/home/tomcat/.m2/repository/commons-lang/commons-lang/2.4/commons-lang-2.4.jar/home/tomcat/.m2/repository/jgoodies/plastic/1.2.0/plastic-1.2.0.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/gmaven-mojo/1.0-rc-3/gmaven-mojo-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/runtime/gmaven-runtime-api/1.0-rc-3/gmaven-runtime-api-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/feature/gmaven-feature-api/1.0-rc-3/gmaven-feature-api-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/runtime/gmaven-runtime-default/1.0-rc-3/gmaven-runtime-default-1.0-rc-3.jar/home/tomcat/.m2/repository/org/slf4j/slf4j-api/1.5.0/slf4j-api-1.5.0.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/runtime/gmaven-runtime-1.5/1.0-rc-3/gmaven-runtime-1.5-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/feature/gmaven-feature-support/1.0-rc-3/gmaven-feature-support-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/runtime/gmaven-runtime-support/1.0-rc-3/gmaven-runtime-support-1.0-rc-3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/maven/gmaven-common/1.0-rc-3/gmaven-common-1.0-rc-3.jar/home/tomcat/.m2/repository/com/thoughtworks/qdox/qdox/1.6.3/qdox-1.6.3.jar/home/tomcat/.m2/repository/org/codehaus/groovy/groovy-all-minimal/1.5.6/groovy-all-minimal-1.5.6.jar/home/tomcat/.m2/repository/org/apache/ant/ant/1.7.1/ant-1.7.1.jar/home/tomcat/.m2/repository/org/apache/ant/ant-launcher/1.7.1/ant-launcher-1.7.1.jar/home/tomcat/.m2/repository/jline/jline/0.9.94/jline-0.9.94.jar/home/tomcat/.m2/repository/org/codehaus/plexus/plexus-resources/1.0-alpha-4/plexus-resources-1.0-alpha-4.jar/opt/java/apache-maven-2.2.1/lib/maven-2.2.1-uber.jar/home/tomcat/.m2/repository/org/kuali/student/security/ks-standard-sec/1.1.0-SNAPSHOT/ks-standard-sec-1.1.0-SNAPSHOT.jar/home/tomcat/.m2/repository/org/springframework/spring-core/2.5.6/spring-core-2.5.6.jar/home/tomcat/.m2/repository/commons-logging/commons-logging/1.1.1/commons-logging-1.1.1.jar/home/tomcat/.m2/repository/org/springframework/spring-orm/2.5.6/spring-orm-2.5.6.jar/home/tomcat/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar/home/tomcat/.m2/repository/org/springframework/spring-beans/2.5.6/spring-beans-2.5.6.jar/home/tomcat/.m2/repository/org/springframework/spring-context/2.5.6/spring-context-2.5.6.jar/home/tomcat/.m2/repository/org/springframework/spring-tx/2.5.6/spring-tx-2.5.6.jar/home/tomcat/.m2/repository/org/springframework/security/spring-security-core/2.0.4/spring-security-core-2.0.4.jar/home/tomcat/.m2/repository/org/springframework/spring-aop/2.5.6/spring-aop-2.5.6.jar/home/tomcat/.m2/repository/commons-codec/commons-codec/1.3/commons-codec-1.3.jar/home/tomcat/.m2/repository/commons-collections/commons-collections/3.2/commons-collections-3.2.jar/home/tomcat/.m2/repository/org/springframework/security/spring-security-cas-client/2.0.4/spring-security-cas-client-2.0.4.jar/home/tomcat/.m2/repository/org/jasig/cas/cas-client-core/3.1.3/cas-client-core-3.1.3.jar/home/tomcat/.m2/repository/org/opensaml/opensaml/1.1/opensaml-1.1.jar/home/tomcat/.m2/repository/org/kuali/student/common/ks-common-util/1.1.0-SNAPSHOT/ks-common-util-1.1.0-SNAPSHOT.jar/home/tomcat/.m2/repository/javax/persistence/persistence-api/1.0/persistence-api-1.0.jar/home/tomcat/.m2/repository/javax/transaction/jta/1.0.1B/jta-1.0.1B.jar/home/tomcat/.m2/repository/net/sf/ehcache/ehcache/1.4.1/ehcache-1.4.1.jar/home/tomcat/.m2/repository/net/sf/jsr107cache/jsr107cache/1.0/jsr107cache-1.0.jar/home/tomcat/.m2/repository/backport-util-concurrent/backport-util-concurrent/3.1/backport-util-concurrent-3.1.jar/home/tomcat/.m2/repository/org/slf4j/slf4j-api/1.6.0/slf4j-api-1.6.0.jar/home/tomcat/.m2/repository/org/slf4j/slf4j-log4j12/1.6.0/slf4j-log4j12-1.6.0.jar/home/tomcat/.m2/repository/log4j/log4j/1.2.14/log4j-1.2.14.jar/home/tomcat/.m2/repository/org/springframework/spring-webmvc/2.5.6/spring-webmvc-2.5.6.jar/home/tomcat/.m2/repository/org/springframework/spring-context-support/2.5.6/spring-context-support-2.5.6.jar/home/tomcat/.m2/repository/org/springframework/spring-web/2.5.6/spring-web-2.5.6.jar/home/tomcat/.m2/repository/org/aspectj/aspectjrt/1.5.4/aspectjrt-1.5.4.jar/home/tomcat/.m2/repository/org/apache/velocity/velocity-tools/2.0/velocity-tools-2.0.jar/home/tomcat/.m2/repository/commons-beanutils/commons-beanutils/1.7.0/commons-beanutils-1.7.0.jar/home/tomcat/.m2/repository/commons-digester/commons-digester/1.8/commons-digester-1.8.jar/home/tomcat/.m2/repository/commons-chain/commons-chain/1.1/commons-chain-1.1.jar/home/tomcat/.m2/repository/commons-validator/commons-validator/1.3.1/commons-validator-1.3.1.jar/home/tomcat/.m2/repository/oro/oro/2.0.8/oro-2.0.8.jar/home/tomcat/.m2/repository/sslext/sslext/1.2-0/sslext-1.2-0.jar/home/tomcat/.m2/repository/org/apache/struts/struts-core/1.3.8/struts-core-1.3.8.jar/home/tomcat/.m2/repository/antlr/antlr/2.7.7/antlr-2.7.7.jar/home/tomcat/.m2/repository/org/apache/struts/struts-taglib/1.3.8/struts-taglib-1.3.8.jar/home/tomcat/.m2/repository/org/apache/struts/struts-tiles/1.3.8/struts-tiles-1.3.8.jar/home/tomcat/.m2/repository/org/apache/velocity/velocity/1.6.4/velocity-1.6.4.jar/home/tomcat/.m2/repository/commons-lang/commons-lang/2.3/commons-lang-2.3.jar/home/tomcat/.m2/repository/logkit/logkit/2.0/logkit-2.0.jar/home/tomcat/.m2/repository/org/antlr/antlr-runtime/3.1.1/antlr-runtime-3.1.1.jar/home/tomcat/.m2/repository/org/kuali/rice/rice-api/1.0.3/rice-api-1.0.3.jar/home/tomcat/.m2/repository/org/apache/geronimo/specs/geronimo-ws-metadata_2.0_spec/1.1.2/geronimo-ws-metadata_2.0_spec-1.1.2.jar/home/tomcat/.m2/repository/org/apache/geronimo/specs/geronimo-annotation_1.0_spec/1.1.1/geronimo-annotation_1.0_spec-1.1.1.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-api/2.2.9/cxf-api-2.2.9.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-common-utilities/2.2.9/cxf-common-utilities-2.2.9.jar/home/tomcat/.m2/repository/wsdl4j/wsdl4j/1.6.2/wsdl4j-1.6.2.jar/home/tomcat/.m2/repository/org/apache/ws/commons/schema/XmlSchema/1.4.5/XmlSchema-1.4.5.jar/home/tomcat/.m2/repository/org/apache/neethi/neethi/2.0.4/neethi-2.0.4.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-common-schemas/2.2.9/cxf-common-schemas-2.2.9.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-rt-core/2.2.9/cxf-rt-core-2.2.9.jar/home/tomcat/.m2/repository/com/sun/xml/bind/jaxb-impl/2.1.13/jaxb-impl-2.1.13.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-rt-frontend-simple/2.2.9/cxf-rt-frontend-simple-2.2.9.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-rt-ws-security/2.2.9/cxf-rt-ws-security-2.2.9.jar/home/tomcat/.m2/repository/org/apache/ws/security/wss4j/1.5.8/wss4j-1.5.8.jar/home/tomcat/.m2/repository/org/apache/santuario/xmlsec/1.4.2/xmlsec-1.4.2.jar/home/tomcat/.m2/repository/xalan/xalan/2.7.1/xalan-2.7.1.jar/home/tomcat/.m2/repository/xalan/serializer/2.7.1/serializer-2.7.1.jar/home/tomcat/.m2/repository/org/bouncycastle/bcprov-jdk15/1.43/bcprov-jdk15-1.43.jar/home/tomcat/.m2/repository/org/codehaus/woodstox/wstx-asl/3.2.9/wstx-asl-3.2.9.jar/home/tomcat/.m2/repository/javax/servlet/servlet-api/2.5/servlet-api-2.5.jar/home/tomcat/.m2/repository/javax/xml/bind/jaxb-api/2.1/jaxb-api-2.1.jar/home/tomcat/.m2/repository/javax/xml/stream/stax-api/1.0-2/stax-api-1.0-2.jar/home/tomcat/.m2/repository/org/apache/cxf/cxf-rt-databinding-aegis/2.2.9/cxf-rt-databinding-aegis-2.2.9.jar/home/tomcat/temp/ks-1.1-perf/ks-security/ks-sts/src/main/java/home/tomcat/temp/ks-1.1-perf/ks-security/ks-sts/targetDead store to local variableDead store to principal in org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)At ProxyTicketRetrieverFilterSTS.java:[lines 53-244]In class org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTSIn method org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)Local variable named principalAt ProxyTicketRetrieverFilterSTS.java:[line 78]Possible null pointer dereferencePossible null pointer dereference of rstr in org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)At ProxyTicketRetrieverFilterSTS.java:[lines 53-244]In class org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTSIn method org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)Value loaded from rstrDereferenced at ProxyTicketRetrieverFilterSTS.java:[line 97]Known null at ProxyTicketRetrieverFilterSTS.java:[line 89]Exception is caught when Exception is not thrownException is caught when Exception is not thrown in org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)At ProxyTicketRetrieverFilterSTS.java:[lines 53-244]In class org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTSIn method org.kuali.student.security.filter.ProxyTicketRetrieverFilterSTS.doFilterHttp(HttpServletRequest, HttpServletResponse, FilterChain)At ProxyTicketRetrieverFilterSTS.java:[line 155]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.policy.dto.PolicyReference.getDigest() may expose internal representation by returning PolicyReference.digestAt PolicyReference.java:[lines 39-141]In class org.kuali.student.security.policy.dto.PolicyReferenceIn method org.kuali.student.security.policy.dto.PolicyReference.getDigest()In PolicyReference.javaField org.kuali.student.security.policy.dto.PolicyReference.digestAt PolicyReference.java:[line 84]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.policy.dto.PolicyReference.setDigest(byte[]) may expose internal representation by storing an externally mutable object into PolicyReference.digestAt PolicyReference.java:[lines 39-141]In class org.kuali.student.security.policy.dto.PolicyReferenceIn method org.kuali.student.security.policy.dto.PolicyReference.setDigest(byte[])In PolicyReference.javaField org.kuali.student.security.policy.dto.PolicyReference.digestLocal variable named valueAt PolicyReference.java:[line 95]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.trust.dto.AuthenticatorType.getCombinedHash() may expose internal representation by returning AuthenticatorType.combinedHashAt AuthenticatorType.java:[lines 39-95]In class org.kuali.student.security.trust.dto.AuthenticatorTypeIn method org.kuali.student.security.trust.dto.AuthenticatorType.getCombinedHash()In AuthenticatorType.javaField org.kuali.student.security.trust.dto.AuthenticatorType.combinedHashAt AuthenticatorType.java:[line 54]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.trust.dto.AuthenticatorType.setCombinedHash(byte[]) may expose internal representation by storing an externally mutable object into AuthenticatorType.combinedHashAt AuthenticatorType.java:[lines 39-95]In class org.kuali.student.security.trust.dto.AuthenticatorTypeIn method org.kuali.student.security.trust.dto.AuthenticatorType.setCombinedHash(byte[])In AuthenticatorType.javaField org.kuali.student.security.trust.dto.AuthenticatorType.combinedHashLocal variable named valueAt AuthenticatorType.java:[line 65]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.trust.dto.BinarySecretType.getValue() may expose internal representation by returning BinarySecretType.valueAt BinarySecretType.java:[lines 37-107]In class org.kuali.student.security.trust.dto.BinarySecretTypeIn method org.kuali.student.security.trust.dto.BinarySecretType.getValue()In BinarySecretType.javaField org.kuali.student.security.trust.dto.BinarySecretType.valueAt BinarySecretType.java:[line 54]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.trust.dto.BinarySecretType.setValue(byte[]) may expose internal representation by storing an externally mutable object into BinarySecretType.valueAt BinarySecretType.java:[lines 37-107]In class org.kuali.student.security.trust.dto.BinarySecretTypeIn method org.kuali.student.security.trust.dto.BinarySecretType.setValue(byte[])In BinarySecretType.javaField org.kuali.student.security.trust.dto.BinarySecretType.valueLocal variable named valueAt BinarySecretType.java:[line 65]Method may fail to close streamorg.kuali.student.security.trust.service.SecurityTokenServiceImpl.validateCasProxyTicket(String, String) may fail to close streamAt SecurityTokenServiceImpl.java:[lines 44-293]In class org.kuali.student.security.trust.service.SecurityTokenServiceImplIn method org.kuali.student.security.trust.service.SecurityTokenServiceImpl.validateCasProxyTicket(String, String)At Reader.java:[lines 49-232]Need to close java.io.Reader At SecurityTokenServiceImpl.java:[line 178]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getG() may expose internal representation by returning DSAKeyValueType.gAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getG()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.gAt DSAKeyValueType.java:[line 118]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getJ() may expose internal representation by returning DSAKeyValueType.jAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getJ()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.jAt DSAKeyValueType.java:[line 162]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getP() may expose internal representation by returning DSAKeyValueType.pAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getP()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.pAt DSAKeyValueType.java:[line 74]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getPgenCounter() may expose internal representation by returning DSAKeyValueType.pgenCounterAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getPgenCounter()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.pgenCounterAt DSAKeyValueType.java:[line 206]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getQ() may expose internal representation by returning DSAKeyValueType.qAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getQ()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.qAt DSAKeyValueType.java:[line 96]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getSeed() may expose internal representation by returning DSAKeyValueType.seedAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getSeed()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.seedAt DSAKeyValueType.java:[line 184]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.getY() may expose internal representation by returning DSAKeyValueType.yAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.getY()In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.yAt DSAKeyValueType.java:[line 140]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setG(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.gAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setG(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.gLocal variable named valueAt DSAKeyValueType.java:[line 129]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setJ(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.jAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setJ(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.jLocal variable named valueAt DSAKeyValueType.java:[line 173]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setP(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.pAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setP(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.pLocal variable named valueAt DSAKeyValueType.java:[line 85]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setPgenCounter(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.pgenCounterAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setPgenCounter(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.pgenCounterLocal variable named valueAt DSAKeyValueType.java:[line 217]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setQ(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.qAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setQ(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.qLocal variable named valueAt DSAKeyValueType.java:[line 107]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setSeed(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.seedAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setSeed(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.seedLocal variable named valueAt DSAKeyValueType.java:[line 195]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.DSAKeyValueType.setY(byte[]) may expose internal representation by storing an externally mutable object into DSAKeyValueType.yAt DSAKeyValueType.java:[lines 49-218]In class org.kuali.student.security.xmldsig.dto.DSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.DSAKeyValueType.setY(byte[])In DSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.DSAKeyValueType.yLocal variable named valueAt DSAKeyValueType.java:[line 151]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.RSAKeyValueType.getExponent() may expose internal representation by returning RSAKeyValueType.exponentAt RSAKeyValueType.java:[lines 35-84]In class org.kuali.student.security.xmldsig.dto.RSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.RSAKeyValueType.getExponent()In RSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.RSAKeyValueType.exponentAt RSAKeyValueType.java:[line 72]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.RSAKeyValueType.getModulus() may expose internal representation by returning RSAKeyValueType.modulusAt RSAKeyValueType.java:[lines 35-84]In class org.kuali.student.security.xmldsig.dto.RSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.RSAKeyValueType.getModulus()In RSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.RSAKeyValueType.modulusAt RSAKeyValueType.java:[line 50]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.RSAKeyValueType.setExponent(byte[]) may expose internal representation by storing an externally mutable object into RSAKeyValueType.exponentAt RSAKeyValueType.java:[lines 35-84]In class org.kuali.student.security.xmldsig.dto.RSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.RSAKeyValueType.setExponent(byte[])In RSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.RSAKeyValueType.exponentLocal variable named valueAt RSAKeyValueType.java:[line 83]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.RSAKeyValueType.setModulus(byte[]) may expose internal representation by storing an externally mutable object into RSAKeyValueType.modulusAt RSAKeyValueType.java:[lines 35-84]In class org.kuali.student.security.xmldsig.dto.RSAKeyValueTypeIn method org.kuali.student.security.xmldsig.dto.RSAKeyValueType.setModulus(byte[])In RSAKeyValueType.javaField org.kuali.student.security.xmldsig.dto.RSAKeyValueType.modulusLocal variable named valueAt RSAKeyValueType.java:[line 61]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.ReferenceType.getDigestValue() may expose internal representation by returning ReferenceType.digestValueAt ReferenceType.java:[lines 45-205]In class org.kuali.student.security.xmldsig.dto.ReferenceTypeIn method org.kuali.student.security.xmldsig.dto.ReferenceType.getDigestValue()In ReferenceType.javaField org.kuali.student.security.xmldsig.dto.ReferenceType.digestValueAt ReferenceType.java:[line 121]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.ReferenceType.setDigestValue(byte[]) may expose internal representation by storing an externally mutable object into ReferenceType.digestValueAt ReferenceType.java:[lines 45-205]In class org.kuali.student.security.xmldsig.dto.ReferenceTypeIn method org.kuali.student.security.xmldsig.dto.ReferenceType.setDigestValue(byte[])In ReferenceType.javaField org.kuali.student.security.xmldsig.dto.ReferenceType.digestValueLocal variable named valueAt ReferenceType.java:[line 132]May expose internal representation by returning reference to mutable objectorg.kuali.student.security.xmldsig.dto.SignatureValueType.getValue() may expose internal representation by returning SignatureValueType.valueAt SignatureValueType.java:[lines 36-90]In class org.kuali.student.security.xmldsig.dto.SignatureValueTypeIn method org.kuali.student.security.xmldsig.dto.SignatureValueType.getValue()In SignatureValueType.javaField org.kuali.student.security.xmldsig.dto.SignatureValueType.valueAt SignatureValueType.java:[line 54]May expose internal representation by incorporating reference to mutable objectorg.kuali.student.security.xmldsig.dto.SignatureValueType.setValue(byte[]) may expose internal representation by storing an externally mutable object into SignatureValueType.valueAt SignatureValueType.java:[lines 36-90]In class org.kuali.student.security.xmldsig.dto.SignatureValueTypeIn method org.kuali.student.security.xmldsig.dto.SignatureValueType.setValue(byte[])In SignatureValueType.javaField org.kuali.student.security.xmldsig.dto.SignatureValueType.valueLocal variable named valueAt SignatureValueType.java:[line 65]Malicious code vulnerabilityDodgyBad practiceCorrectnessMay expose internal representation by incorporating reference to mutable object

<p> This code stores a reference to an externally mutable object into the internal representation of the object.&nbsp; If instances are accessed by untrusted code, and unchecked changes to the mutable object would compromise security or other important properties, you will need to do something different. Storing a copy of the object is better approach in many situations.</p>

Method may fail to close stream

<p> The method creates an IO stream object, does not assign it to any fields, pass it to other methods that might close it, or return it, and does not appear to close the stream on all paths out of the method.&nbsp; This may result in a file descriptor leak.&nbsp; It is generally a good idea to use a <code>finally</code> block to ensure that streams are closed.</p>

Possible null pointer dereference

<p> There is a branch of statement that, <em>if executed,</em> guarantees that a null value will be dereferenced, which would generate a <code>NullPointerException</code> when the code is executed. Of course, the problem might be that the branch or statement is infeasible and that the null pointer exception can't ever be executed; deciding that is beyond the ability of FindBugs. </p>

May expose internal representation by returning reference to mutable object

<p> Returning a reference to a mutable object value stored in one of the object's fields exposes the internal representation of the object.&nbsp; If instances are accessed by untrusted code, and unchecked changes to the mutable object would compromise security or other important properties, you will need to do something different. Returning a new copy of the object is better approach in many situations.</p>

Dead store to local variable

<p> This instruction assigns a value to a local variable, but the value is not read or used in any subsequent instruction. Often, this indicates an error, because the value computed is never used. </p> <p> Note that Sun's javac compiler often generates dead stores for final local variables. Because FindBugs is a bytecode-based tool, there is no easy way to eliminate these false positives. </p>

Exception is caught when Exception is not thrown

<p> This method uses a try-catch block that catches Exception objects, but Exception is not thrown within the try block, and RuntimeException is not explicitly caught. It is a common bug pattern to say try { ... } catch (Exception e) { something } as a shorthand for catching a number of types of exception each of whose catch blocks is identical, but this construct also accidentally catches RuntimeException as well, masking potential bugs. </p>

Storing reference to mutable objectDead local storeStream not closed on all pathsRuntimeException captureNull pointer dereferenceMethod returning array may expose internal representation