...
| Code Block | ||
|---|---|---|
| ||
public class MyClass {
private static byte[] data;
public static byte[] getData() {
return data.clone();
}
public static void setData(byte[] b) {
securityCheck();
data = b.clone();
}
}
|
Risk Assessment
Unauthorized modifications to public static variables can result in unexpected behavior and can bypass important security checks and/or invoke malicious code.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
OBJ32 OBJ31-J | medium | probable | high | P4 | L3 |
References
Avoiding Antipatterns Antipattern 5, Misusing Public Static Variables
...