FindBugs Bug Detector Report
The following document contains the results of FindBugs Report
FindBugs Version is 2.0.2
Threshold is medium
Effort is min
Summary
| Classes |
Bugs |
Errors |
Missing Classes |
| 205 |
7 |
0 |
0 |
org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer
| Bug |
Category |
Details |
Line |
Priority |
| Possible null pointer dereference of currentVersion in org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.removeSpuriousCPE(Dependency) |
CORRECTNESS |
NP_NULL_ON_SOME_PATH |
164 |
Medium |
| Possible null pointer dereference of nextVersion on branch that might be infeasible in org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.removeSpuriousCPE(Dependency) |
STYLE |
NP_NULL_ON_SOME_PATH_MIGHT_BE_INFEASIBLE |
164 |
Medium |
org.owasp.dependencycheck.analyzer.JavaScriptAnalyzer
| Bug |
Category |
Details |
Line |
Priority |
| Found reliance on default encoding in org.owasp.dependencycheck.analyzer.JavaScriptAnalyzer.analyze(Dependency, Engine): new java.io.FileReader(File) |
I18N |
DM_DEFAULT_ENCODING |
111 |
High |
org.owasp.dependencycheck.data.update.task.CallableDownloadTask
| Bug |
Category |
Details |
Line |
Priority |
| new org.owasp.dependencycheck.data.update.task.CallableDownloadTask(NvdCveInfo, ExecutorService, CveDB) might ignore java.io.IOException |
BAD_PRACTICE |
DE_MIGHT_IGNORE |
58 |
Medium |
org.owasp.dependencycheck.utils.LogUtils
| Bug |
Category |
Details |
Line |
Priority |
| Changes to logger could be lost in org.owasp.dependencycheck.utils.LogUtils.prepareLogger(InputStream, String) |
EXPERIMENTAL |
LG_LOST_LOGGER_DUE_TO_WEAK_REFERENCE |
58 |
High |
org.owasp.dependencycheck.utils.URLConnectionFactory
| Bug |
Category |
Details |
Line |
Priority |
| Redundant nullcheck of conn which is known to be null in org.owasp.dependencycheck.utils.URLConnectionFactory.createHttpURLConnection(URL) |
STYLE |
RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE |
83 |
Medium |
