KS Standard Security - FindBugs Bug Detector Report

Last Published: 2011-10-27 | Version: 1.2

Project Documentation

Project Information
Project Reports
- Cobertura Test Coverage
- FindBugs Report

FindBugs Bug Detector Report

The following document contains the results of FindBugs Report

FindBugs Version is 1.3.9

Threshold is medium

Effort is min

Summary

Classes	Bugs	Errors	Missing Classes
19	11	0	0

Files

Class	Bugs
org.kuali.student.security.cxf.interceptors.SamlTokenCxfOutInterceptor$SamlTokenCxfOutInterceptorInternal	1
org.kuali.student.security.filter.KSLogoutFilter	1
org.kuali.student.security.saml.service.SamlIssuerServiceImpl	1
org.kuali.student.security.spring.KSDefaultUserDetailsService	2
org.kuali.student.security.util.SamlUtils	6

org.kuali.student.security.cxf.interceptors.SamlTokenCxfOutInterceptor$SamlTokenCxfOutInterceptorInternal

Bug	Category	Details	Line	Priority
Nullcheck of mc at line 242 of value previously dereferenced in org.kuali.student.security.cxf.interceptors.SamlTokenCxfOutInterceptor$SamlTokenCxfOutInterceptorInternal.handleMessage(SoapMessage)	CORRECTNESS	RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE	143	High

org.kuali.student.security.filter.KSLogoutFilter

Bug	Category	Details	Line	Priority
new org.kuali.student.security.filter.KSLogoutFilter(String, LogoutHandler[]) may expose internal representation by storing an externally mutable object into KSLogoutFilter.handlers	MALICIOUS_CODE	EI_EXPOSE_REP2	65	Medium

org.kuali.student.security.saml.service.SamlIssuerServiceImpl

Bug	Category	Details	Line	Priority
org.kuali.student.security.saml.service.SamlIssuerServiceImpl.validateCasProxyTicket(String, String) may fail to close stream	BAD_PRACTICE	OS_OPEN_STREAM	57	Medium

org.kuali.student.security.spring.KSDefaultUserDetailsService

Bug	Category	Details	Line	Priority
Read of unwritten field identityService in org.kuali.student.security.spring.KSDefaultUserDetailsService.loadUserByUsername(String)	CORRECTNESS	NP_UNWRITTEN_FIELD	62	Medium
Field only ever set to null: org.kuali.student.security.spring.KSDefaultUserDetailsService.identityService	CORRECTNESS	UWF_NULL_FIELD		High

org.kuali.student.security.util.SamlUtils

Bug	Category	Details	Line	Priority
Write to static field org.kuali.student.security.util.SamlUtils.certificateAlias from instance method org.kuali.student.security.util.SamlUtils.setCertificateAlias(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	335	High
Write to static field org.kuali.student.security.util.SamlUtils.keystoreFile from instance method org.kuali.student.security.util.SamlUtils.setKeystoreFile(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	279	High
Write to static field org.kuali.student.security.util.SamlUtils.keystorePass from instance method org.kuali.student.security.util.SamlUtils.setKeystorePass(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	293	High
Write to static field org.kuali.student.security.util.SamlUtils.keystoreType from instance method org.kuali.student.security.util.SamlUtils.setKeystoreType(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	265	High
Write to static field org.kuali.student.security.util.SamlUtils.privateKeyAlias from instance method org.kuali.student.security.util.SamlUtils.setPrivateKeyAlias(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	307	High
Write to static field org.kuali.student.security.util.SamlUtils.privateKeyPass from instance method org.kuali.student.security.util.SamlUtils.setPrivateKeyPass(String)	STYLE	ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD	321	High