...
Sound automated detection appears to be infeasible in the general case. Heuristic approaches could be useful.
Related Guidelines
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="532020dc-45dd-4e38-8db2-b5b92b21d3d4"><ac:plain-text-body><![CDATA[ | [[MITRE 2009 | AA. Bibliography#MITRE 09]] | [CWE-374 | http://cwe.mitre.org/data/definitions/374.html] "Passing Mutable Objects to an Untrusted Method" and [CWE-375 | http://cwe.mitre.org/data/definitions/375.html] "Returning a Mutable Object to an Untrusted Caller" | ]]></ac:plain-text-body></ac:structured-macro> |
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup |
...
" ac:schema-version="1" ac:macro-id="bb62a607-fbfb-4ff2-9b80-f33084d90182"><ac:plain-text-body><![CDATA[ | [[API |
...
2006 |
...
AA. |
...
Bibliography#API |
...
06] |
...
] |
...
[method |
...
clone() |
...
http://java.sun.com/javase/6/docs/api/java/lang/Object.html#clone()] |
...
]]></ac:plain-text-body></ac:structured-macro> | |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0eedeae6-e145-405e-91de-75177384a3c3"><ac:plain-text-body><![CDATA[ | [[Bloch |
...
2008 |
...
AA. |
...
Bibliography#Bloch |
...
08] |
...
] |
...
Item |
...
39: |
...
Make |
...
defensive |
...
copies |
...
when |
...
needed |
...
and |
...
Item |
...
11: |
...
Override |
...
clone |
...
judiciously | ]]></ac:plain-text-body></ac:structured-macro> | |||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f240ce63-1142-4969-9563-005e1dc4cc98"><ac:plain-text-body><![CDATA[ | [[SCG 2007 | AA. Bibliography#SCG 07]] | Guideline 2-2 Support copy functionality for a mutable class | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="72a938cc-2b02-4b13-ad28-5dc7584716d5"><ac:plain-text-body><![CDATA[ | [[SCG 2009 | AA. Bibliography#SCG 09]] | Guideline 2-3 Support copy functionality for a mutable class | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="26531867-5692-4b20-ba8e-077a9346d433"><ac:plain-text-body><![CDATA[ | [[Security 2006 | AA. Bibliography#Security 06]] | ]]></ac:plain-text-body></ac:structured-macro> |
...
OBJ07-J. Preserve dependencies in subclasses when changing superclasses 04. Object Orientation (OBJ) OBJ09-J. Defensively copy private mutable class members before returning their references