...
Failure to provide an unmodifiable, safe view of a sensitive mutable object to untrusted code can lead to malicious tampering and corruption of the object.
Automated Detection
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| FB.MALICIOUS_CODE.MS_OOI_PKGPROTECT FB.MALICIOUS_CODE.MS_MUTABLE_COLLECTION FB.MALICIOUS_CODE.MS_MUTABLE_COLLECTION_PKGPROTECT FB.MALICIOUS_CODE.MS_PKGPROTECT | Field should be moved out of an interface and made package protected Field is a mutable collection Field is a mutable collection which should be package protected Field should be package protected |
Bibliography
...