Page History

...

  File someFile = new File("someFileName.txt");

  // do something with someFile

  someFile.delete();

Compliant Solution

...

This noncompliant code example ignores the return value while making use of the String.replace method. As a result, the original string is not updated even though it seems otherwise. The String.replace() method does not modify the state of the String but instead, returns a reference to a new String object with the replacements in effectplace.

public class Ignore {
  public static void main(String[] args) {
    String original = "insecure";
    original.replace( 'i', '9' );
    System.out.println(original);
  }
}

Compliant Solution

The This compliant solution correctly updates the original string String object by assigning to it the return value.

...

Ignoring method return values may lead to erroneous computation which, in turn, may lead to vulnerabilitiesunanticipated program behavior.

...