|
Articles
|
|
 |
Code Correctness: Call to System.gc()
Code Correctness: Call to System.gc()
Abstract
Explicit requests for garbage collection are a bellwether indicating likely performance problems....
|
|
06 May, 2008
Views: 282
|
|
|
J2EE Bad Practices: Sockets
J2EE Bad Practices: Sockets
Abstract
Socket-based communication in web applications is prone to error.
Description
The J2EE standard...
|
|
06 May, 2008
Views: 293
|
|
|
J2EE Bad Practices: getConnection()
J2EE Bad Practices: getConnection()
Abstract
The J2EE standard forbids the direct management of connections.
Description
The J2EE standard...
|
|
06 May, 2008
Views: 319
|
|
|
Object Model Violation: Just One of equals() and hashCode() Defined
Object Model Violation: Just One of equals() and hashCode() Defined
Abstract
This class overrides only one of equals() and hashCode().
...
|
|
06 May, 2008
Views: 248
|
|
|
Often Misused: Authentication
Often Misused: Authentication
Abstract
Attackers can spoof DNS entries. Do not rely on DNS names for security.
Description
Many DNS...
|
|
06 May, 2008
Views: 325
|
|
|
Often Misused: Exception Handling
Often Misused: Exception Handling
Abstract
The _alloca() function can throw a stack overflow exception, potentially causing the program to crash....
|
|
06 May, 2008
Views: 307
|
|
|
Often Misused: File System
Often Misused: File System
Abstract
Passing an inadequately-sized output buffer to a path manipulation function can result in a buffer overflow....
|
|
06 May, 2008
Views: 272
|
|
|
Often Misused: Privilege Management
Often Misused: Privilege Management
Abstract
Failure to adhere to the principle of least privilege amplifies the risk posed by other...
|
|
06 May, 2008
Views: 295
|
|
|
Often Misused: String Management
Often Misused: String Management
Abstract
Functions that convert between Multibyte and Unicode strings encourage buffer overflows.
...
|
|
06 May, 2008
Views: 216
|
|
|
Poor Style: Explicit call to finalize()
Poor Style: Explicit call to finalize()
Abstract
The finalize() method should only be called by the JVM after the object has been garbage...
|
|
06 May, 2008
Views: 262
|
|
