...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
OBJ10-J | medium | probable | medium | P8 | L2 |
Automated Detection
| Tool | Version | Checker | Description |
|---|---|---|---|
| Eclipse | 1.0 | The serializable class .* does not declare a static final serialVersionUID field of type long | Implemented |
| Coverity | 1.0 | FB.MS_MUTABLE_ARRAY FB.MS_SHOULD_BE_FINAL | Implemented |
| Findbugs | 1.0 | MS_MUTABLE_ARRAY MS_SHOULD_BE_FINAL | Implemented |
Related Guidelines
CWE-493. Critical public variable without final modifier | |
| CWE-500. Public static field not marked final |
Secure Coding Guidelines for the Java Programming Language, Version 3.0 | Guideline 3-1. Treat public static fields as constants |
...