Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

APIs that mirror language checks

java.lang.Class.newInstance

java.lang.reflect.Constructor.newInstance

java.lang.reflect.Field.get*

java.lang.reflect.Field.set*

java.lang.reflect.Method.invoke

java.util.concurrent.atomic.AtomicIntegerFieldUpdater.newUpdater

java.util.concurrent.atomic.AtomicLongFieldUpdater.newUpdater

java.util.concurrent.atomic.AtomicReferenceFieldUpdater.newUpdater

Risk Assessment

TODOPerforming access checks against the immediate caller, instead of against each caller in the execution sequence, may seriously compromise the security of a java application.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

SEC04-J

?? medium ??

probable

?? high

P??

L??

Automated Detection

...