SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.8.2

Threshold is medium

Effort is default

Summary

Classes Bugs Errors Missing Classes
67 25 0 0

Files

Class Bugs
org.europa.together.application.ImgSclrProcessor 2
org.europa.together.application.JakartaMailClient 3
org.europa.together.application.JavaCryptoTools 1
org.europa.together.application.JdbcActions 1
org.europa.together.application.NimbusJwt 1
org.europa.together.application.OpenPdfRenderer 1
org.europa.together.application.internal.PdfDocument 2
org.europa.together.application.internal.PdfReplacedElementFactory 2
org.europa.together.domain.ByteOrderMark 1
org.europa.together.domain.JpaPagination 4
org.europa.together.domain.Version 1
org.europa.together.utils.FileUtils 5
org.europa.together.utils.StringUtils 1

org.europa.together.application.ImgSclrProcessor

Bug Category Details Line Priority
org.europa.together.application.ImgSclrProcessor.getImage() may expose internal representation by returning ImgSclrProcessor.image MALICIOUS_CODE EI_EXPOSE_REP 186 Medium
org.europa.together.application.ImgSclrProcessor.loadImage(BufferedImage) may expose internal representation by storing an externally mutable object into ImgSclrProcessor.image MALICIOUS_CODE EI_EXPOSE_REP2 52 Medium

org.europa.together.application.JakartaMailClient

Bug Category Details Line Priority
org.europa.together.application.JakartaMailClient.getMailObject() may expose internal representation by returning JakartaMailClient.email MALICIOUS_CODE EI_EXPOSE_REP 192 Medium
org.europa.together.application.JakartaMailClient.getMimeMessage() may expose internal representation by returning JakartaMailClient.message MALICIOUS_CODE EI_EXPOSE_REP 197 Medium
org.europa.together.application.JakartaMailClient.composeMail(Mail) may expose internal representation by storing an externally mutable object into JakartaMailClient.email MALICIOUS_CODE EI_EXPOSE_REP2 170 Medium

org.europa.together.application.JavaCryptoTools

Bug Category Details Line Priority
org.europa.together.application.JavaCryptoTools.saveKeyPairToFile(String, KeyPair) may fail to clean up java.io.OutputStream on checked exception EXPERIMENTAL OBL_UNSATISFIED_OBLIGATION_EXCEPTION_EDGE 97 Medium

org.europa.together.application.JdbcActions

Bug Category Details Line Priority
Unread field: org.europa.together.application.JdbcActions.jdbcProperties; should this field be static? PERFORMANCE SS_SHOULD_BE_STATIC 39 Medium

org.europa.together.application.NimbusJwt

Bug Category Details Line Priority
Exception thrown in class org.europa.together.application.NimbusJwt at new org.europa.together.application.NimbusJwt() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 45 Medium

org.europa.together.application.OpenPdfRenderer

Bug Category Details Line Priority
org.europa.together.application.OpenPdfRenderer.renderDocumentFromHtml(String, String) may fail to clean up java.io.OutputStream EXPERIMENTAL OBL_UNSATISFIED_OBLIGATION 93 Medium

org.europa.together.application.internal.PdfDocument

Bug Category Details Line Priority
Exception thrown in class org.europa.together.application.internal.PdfDocument at new org.europa.together.application.internal.PdfDocument(PdfReader) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 18 Medium
Exception thrown in class org.europa.together.application.internal.PdfDocument at new org.europa.together.application.internal.PdfDocument(String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 14 Medium

org.europa.together.application.internal.PdfReplacedElementFactory

Bug Category Details Line Priority
Unread field: org.europa.together.application.internal.PdfReplacedElementFactory.height; should this field be static? PERFORMANCE SS_SHOULD_BE_STATIC 30 Medium
Unread field: org.europa.together.application.internal.PdfReplacedElementFactory.width; should this field be static? PERFORMANCE SS_SHOULD_BE_STATIC 31 Medium

org.europa.together.domain.ByteOrderMark

Bug Category Details Line Priority
org.europa.together.domain.ByteOrderMark.getBytes() may expose internal representation by returning ByteOrderMark.value MALICIOUS_CODE EI_EXPOSE_REP 31 Medium

org.europa.together.domain.JpaPagination

Bug Category Details Line Priority
org.europa.together.domain.JpaPagination.getFilterDateCriteria() may expose internal representation by returning JpaPagination.filterDateCriteria MALICIOUS_CODE EI_EXPOSE_REP 289 Medium
org.europa.together.domain.JpaPagination.getFilterFloatCriteria() may expose internal representation by returning JpaPagination.filterFloatCriteria MALICIOUS_CODE EI_EXPOSE_REP 269 Medium
org.europa.together.domain.JpaPagination.setFilterDateCriteria(Map) may expose internal representation by storing an externally mutable object into JpaPagination.filterDateCriteria MALICIOUS_CODE EI_EXPOSE_REP2 299 Medium
org.europa.together.domain.JpaPagination.setFilterFloatCriteria(Map) may expose internal representation by storing an externally mutable object into JpaPagination.filterFloatCriteria MALICIOUS_CODE EI_EXPOSE_REP2 279 Medium

org.europa.together.domain.Version

Bug Category Details Line Priority
Exception thrown in class org.europa.together.domain.Version at new org.europa.together.domain.Version(String) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 41 Medium

org.europa.together.utils.FileUtils

Bug Category Details Line Priority
Dead store to $L1 in org.europa.together.utils.FileUtils.inputStreamToByteArray(InputStream) STYLE DLS_DEAD_LOCAL_STORE 48 Medium
Possible null pointer dereference in org.europa.together.utils.FileUtils.listFileTree(File) due to return value of called method STYLE NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE 205 Medium
Possible null pointer dereference in org.europa.together.utils.FileUtils.listFileTree(File) due to return value of called method STYLE NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE 206 Medium
org.europa.together.utils.FileUtils.copyFile(File, File) may fail to clean up java.io.InputStream on checked exception EXPERIMENTAL OBL_UNSATISFIED_OBLIGATION_EXCEPTION_EDGE 183 Medium
org.europa.together.utils.FileUtils.copyFile(File, File) may fail to clean up java.io.OutputStream on checked exception EXPERIMENTAL OBL_UNSATISFIED_OBLIGATION_EXCEPTION_EDGE 184 Medium

org.europa.together.utils.StringUtils

Bug Category Details Line Priority
Found reliance on default encoding in org.europa.together.utils.StringUtils.base64UrlEncoding(String): String.getBytes() I18N DM_DEFAULT_ENCODING 126 High