According to JLS,:
"The access modifier of an overriding or hiding method must provide at least as much access as the overridden or hidden method, or a compile-time error occurs."
The allowed accesses are:
...
| Code Block | ||
|---|---|---|
| ||
class BadScope {
private final void doLogic() {System.out.println("Super invoked");}
}
|
Risk Assessment
TODOSubclassing allows access restrictions to be weakened, possibly compromising the security of a Java application.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
SCP01-J | ?? medium ?? | probable | ?? high | P?? | L?? |
Automated Detection
...
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
| Wiki Markup |
|---|
\[[JLS 05|AA. Java References#JLS 05]\] Section 8.4.8.3 Requirements in Overriding and Hiding |