Do not reuse the names of publicly visible identifiers, public utility classes, interfaces, or packages in the Java Standard Library.
When a developer uses an identifier that has the same name as a public class, such as {{ Wiki Markup Vector
}}, a subsequent maintainer might be unaware that this identifier does not actually refer to {{java.util.Vector
}} and might unintentionally use the custom {{Vector
}} rather than the original {{java.util.Vector
}} class. The custom type {{Vector
}} can [shadow|BB. Glossary#shadow] a class name from {{java.util.Vector
}}, as specified by the JLS, [§6by The Java Language Specification (JLS), §6.3.2, "Obscured Declarations"|http://java.sun.com/docs/books/jls/third_edition/html/names.html#6.3.2] \ [[JLS 2005|AA. References#JLS 05]\]. This can result in unexpected program behavior.unmigrated-wiki-markup], and unexpected program behavior can occur.
Well-defined import statements can resolve these issues. However, when reused name definitions are imported from other packages, use of the _type-import-on-demand declaration_ (see the JLS, [§7§7.5.2, "Type-Import-on-Demand Declaration"|http://java.sun.com/docs/books/jls/third_edition/html/packages.html#7.5.2] \[ [JLS 2005|AA. References#JLS 05]\]) can complicate a programmer's attempt to determine which specific definition was intended to be used. Additionally, a common practice that can lead to errors is to produce the import statements _after_ writing the code, often via automatic inclusion of import statements by an IDE. This creates further ambiguity with respect to the names. When a custom type is found earlier than the intended type in the Java include path, no further searches are conducted. Consequently, the wrong type is silently adopted. IDE, which creates further ambiguity with respect to the names. When a custom type is found earlier than the intended type in the Java include path, no further searches are conducted. Consequently, the wrong type is silently adopted.
Noncompliant Code Example (Class Name)
This noncompliant code example implements a class that reuses the name of the class java.util.Vector
. It attempts to introduce a different condition for the isEmpty()
method for interfacing with native legacy code by overriding the corresponding method in java.util.Vector
. Unexpected behavior can arise if a maintainer confuses the isEmpty()
method with the java.util.Vector.isEmpty()
method.
Code Block | ||
---|---|---|
| ||
class Vector { private int val = 1; public boolean isEmpty() { if (val == 1) { // comparesCompares with 1 instead of 0 return true; } else { return false; } } // otherOther functionality is same as java.util.Vector } // import java.util.Vector; omitted public class VectorUser { public static void main(String[] args) { Vector v = new Vector(); if (v.isEmpty()) { System.out.println("Vector is empty"); } } } |
...
This compliant solution uses a different name for the class, preventing any potential shadowing of the class from the Java Standard Library.:
Code Block | ||
---|---|---|
| ||
class MyVector { //otherOther code } |
When the developer and organization control the original shadowed class, it may be preferable to change the design strategy of the original in accordance with Bloch's _Effective Java_ \ [[Bloch 2008|AA. References#Bloch 08]\], Item 16, _Prefer interfaces to abstract classes_. Changing the original class into an interface would permit class {{MyVector}} to declare that it implements the hypothetical {{Vector}} interface. This would permit client code that intended to use {{MyVector}} to remain compatible with code that uses the original implementation of {{Vector}}"Prefer Interfaces to Abstract Classes." Changing the original class into an interface would permit class Wiki Markup MyVector
to declare that it implements the hypothetical Vector
interface. With this technique, client code that intended to use MyVector
would remain compatible with code that uses the original implementation of Vector
.
Risk Assessment
Public identifier reuse decreases the readability and maintainability of code.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
DCL01-J | low Low | unlikely Unlikely | medium Medium | P2 | L3 |
Automated Detection
An automated tool can easily detect reuse of the set of names representing public classes or interfaces from the Java Standard Library.
Related Guidelines
The SEI CERT C Secure Coding Standard | |
The SEI CERT C++ Secure Coding Standard |
Bibliography
Puzzle 67, "All Strung Out" | |||||||||||||||
Item 16, "Prefer Interfaces to Abstract Classes" | |||||||||||||||
[JLS 2005] | <ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="6e098856-8d95-43e5-8307-d6fc3f98f758"><ac:plain-text-body><![CDATA[ | [[JLS 2005 | AA. References#JLS 05]] | [§6.3.2, "Obscured Declarations | http://java.sun.com/docs/books/jls/third_edition/html/names.html#6.3.2] | ]]></ac:plain-text-body></ac:structured-macro> |
| " §6.3.1, "Shadowing Declarations" |
| §7.5.2, "Type-Import-on-Demand Declaration | " §14.4.3, "Shadowing of Names by Local Variables | <ac:structured-macro ac:name="unmigrated-wiki-markup" | ac:schema-version="1" ac:macro-id="c97b8c5f-caa1-45f0-afdd-ba28582008eb"><ac:plain-text-body><![CDATA[[[FindBugs 2008 | AA. References#FindBugs 08]] | ]]></ac:plain-text-body></ac:structured-macro> |
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="02135d11-b15d-4ae2-949e-71efe09168f7"><ac:plain-text-body><![CDATA[ | [[Bloch 2005 | AA. References#Bloch 05]] | Puzzle 67. All strung out | ]]></ac:plain-text-body></ac:structured-macro> | |||||||||||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="c393f992-ff43-4ce2-a474-6177e9a8d1ad"><ac:plain-text-body><![CDATA[ | [[Bloch 2008 | AA. References#Bloch 08]] | Item 16. Prefer interfaces to abstract classes | ]]></ac:plain-text-body></ac:structured-macro> | |||||||||||
...
01. Declarations and Initialization (DCL) DCL02-J. Declare all enhanced for statement loop variables final