...
Also note that any defensive copying must be performed before validating the parameters and the checks must be performed on the copies instead of the original parameters. (See guideline SER07-J. Make defensive copies of private mutable components.)
Noncompliant Code Example
...