FindBugs Bug Detector Report
The following document contains the results of FindBugs
FindBugs Version is 3.0.1
Threshold is
Effort is min
Files
davmail.DavGateway
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in davmail.DavGateway.main(String[]) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 69-80 | Medium |
davmail.DavGateway$1
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Naked notify in davmail.DavGateway$1.run() | MT_CORRECTNESS | NN_NAKED_NOTIFY | 143 | Medium |
davmail.Settings
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Hard coded reference to an absolute pathname in davmail.Settings.isDocker() | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | 889 | Medium |
| Hard coded reference to an absolute pathname in davmail.Settings.isDocker() | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | 890 | Medium |
davmail.exchange.ExchangeSession
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.ExchangeSession.CONTACT_ATTRIBUTES is a mutable collection | MALICIOUS_CODE | MS_MUTABLE_COLLECTION | 3001 | High |
| davmail.exchange.ExchangeSession.DISTRIBUTION_LIST_ATTRIBUTES is a mutable collection | MALICIOUS_CODE | MS_MUTABLE_COLLECTION | 3087 | High |
| davmail.exchange.ExchangeSession.IMAP_MESSAGE_ATTRIBUTES is a mutable collection | MALICIOUS_CODE | MS_MUTABLE_COLLECTION | 286 | High |
| davmail.exchange.ExchangeSession.ORG_CONTACT_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3072 | Medium |
| davmail.exchange.ExchangeSession.POP_MESSAGE_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 267 | Medium |
| davmail.exchange.ExchangeSession.SPECIAL is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 102 | Medium |
| davmail.exchange.ExchangeSession.UID_MESSAGE_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 307 | Medium |
| davmail.exchange.ExchangeSession.importanceToPriorityMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3264 | Medium |
| davmail.exchange.ExchangeSession.priorityToImportanceMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3272 | Medium |
davmail.exchange.ExchangeSession$MessageList
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.ExchangeSession$MessageList is Serializable; consider declaring a serialVersionUID | BAD_PRACTICE | SE_NO_SERIALVERSIONID | 1759 | Medium |
davmail.exchange.ExchangeSessionFactory
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in davmail.exchange.ExchangeSessionFactory.getInstance(String, String, String) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 162-176 | Medium |
davmail.exchange.VCalendar
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Uninitialized read of vTimezone in new davmail.exchange.VCalendar(BufferedReader, String, VObject) | CORRECTNESS | UR_UNINIT_READ | 55 | High |
davmail.exchange.VProperty
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.VProperty.MULTIVALUED_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 32 | Medium |
davmail.exchange.auth.ExchangeFormAuthenticator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.auth.ExchangeFormAuthenticator.PASSWORD_FIELDS is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 87 | Medium |
| davmail.exchange.auth.ExchangeFormAuthenticator.TOKEN_FIELDS is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 102 | Medium |
| davmail.exchange.auth.ExchangeFormAuthenticator.USER_NAME_FIELDS is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 72 | Medium |
davmail.exchange.auth.O365Authenticator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.exchange.auth.O365Authenticator.retrieveSmsCode(String, String): new java.io.InputStreamReader(InputStream) | I18N | DM_DEFAULT_ENCODING | 715 | High |
davmail.exchange.auth.O365ManualAuthenticator
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.exchange.auth.O365ManualAuthenticator.getCodeFromConsole(String): new java.io.InputStreamReader(InputStream) | I18N | DM_DEFAULT_ENCODING | 132 | High |
davmail.exchange.dav.DavExchangeSession
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.dav.DavExchangeSession.EVENT_REQUEST_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2273 | Medium |
| davmail.exchange.dav.DavExchangeSession.FOLDER_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1847 | Medium |
| davmail.exchange.dav.DavExchangeSession.ITEM_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2174 | Medium |
| davmail.exchange.dav.DavExchangeSession.importanceToPriorityMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3152 | Medium |
| davmail.exchange.dav.DavExchangeSession.priorityToImportanceMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3160 | Medium |
| Unread public/protected field: davmail.exchange.dav.DavExchangeSession.outboxName | STYLE | URF_UNREAD_PUBLIC_OR_PROTECTED_FIELD | 881 | Medium |
davmail.exchange.dav.Field
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.dav.Field.distinguishedPropertySetMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 40 | Medium |
| davmail.exchange.dav.Field.fieldMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 89 | Medium |
| davmail.exchange.dav.Field.propertyTypeMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 72 | Medium |
davmail.exchange.ews.EWSMethod$Item
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Class davmail.exchange.ews.EWSMethod$Item defines non-transient non-serializable instance field attachments | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
| Class davmail.exchange.ews.EWSMethod$Item defines non-transient non-serializable instance field attendees | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
| Class davmail.exchange.ews.EWSMethod$Item defines non-transient non-serializable instance field fieldUpdates | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
| Class davmail.exchange.ews.EWSMethod$Item defines non-transient non-serializable instance field occurrences | BAD_PRACTICE | SE_BAD_FIELD | Not available | Medium |
davmail.exchange.ews.EwsExchangeSession
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.ews.EwsExchangeSession.CALENDAR_ITEM_REQUEST_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2412 | Medium |
| davmail.exchange.ews.EwsExchangeSession.EVENT_REQUEST_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2397 | Medium |
| davmail.exchange.ews.EwsExchangeSession.FOLDER_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1028 | Medium |
| davmail.exchange.ews.EwsExchangeSession.GALFIND_ATTRIBUTE_MAP is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2992 | Medium |
| davmail.exchange.ews.EwsExchangeSession.IGNORE_ATTRIBUTE_SET is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3026 | Medium |
| davmail.exchange.ews.EwsExchangeSession.ITEM_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 2386 | Medium |
| davmail.exchange.ews.EwsExchangeSession.MESSAGE_TYPES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 91 | Medium |
| davmail.exchange.ews.EwsExchangeSession.taskTovTodoStatusMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 69 | Medium |
| davmail.exchange.ews.EwsExchangeSession.vTodoToTaskStatusMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 68 | Medium |
davmail.exchange.ews.EwsExchangeSession$AttributeCondition
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of fieldURI, which is known to be non-null in davmail.exchange.ews.EwsExchangeSession$AttributeCondition.getFieldURI() | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 795 | Medium |
davmail.exchange.ews.EwsExchangeSession$Event
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in davmail.exchange.ews.EwsExchangeSession$Event.buildFieldUpdates(VCalendar, VObject, boolean) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 1686-1700 | Medium |
davmail.exchange.ews.RecurrenceFieldUpdate
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.ews.RecurrenceFieldUpdate.setEndDate(Date) may expose internal representation by storing an externally mutable object into RecurrenceFieldUpdate.endDate | MALICIOUS_CODE | EI_EXPOSE_REP2 | 58 | Medium |
| davmail.exchange.ews.RecurrenceFieldUpdate.setStartDate(Date) may expose internal representation by storing an externally mutable object into RecurrenceFieldUpdate.startDate | MALICIOUS_CODE | EI_EXPOSE_REP2 | 54 | Medium |
davmail.exchange.graph.GraphExchangeSession
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.graph.GraphExchangeSession.CALENDAR_ITEM_REQUEST_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3127 | Medium |
| davmail.exchange.graph.GraphExchangeSession.CONTACT_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1609 | Medium |
| davmail.exchange.graph.GraphExchangeSession.EVENT_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1704 | Medium |
| davmail.exchange.graph.GraphExchangeSession.EVENT_LIST_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1703 | Medium |
| davmail.exchange.graph.GraphExchangeSession.EVENT_REQUEST_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3112 | Medium |
| davmail.exchange.graph.GraphExchangeSession.FOLDER_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1797 | Medium |
| davmail.exchange.graph.GraphExchangeSession.GALFIND_ATTRIBUTE_MAP is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3611 | Medium |
| davmail.exchange.graph.GraphExchangeSession.IMAP_MESSAGE_ATTRIBUTES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 1577 | Medium |
| davmail.exchange.graph.GraphExchangeSession.ITEM_PROPERTIES is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 3101 | Medium |
| davmail.exchange.graph.GraphExchangeSession.wellKnownFolderMap isn't final but should be | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | 1566 | High |
davmail.exchange.graph.GraphExchangeSession$Event
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to urlcompname in new davmail.exchange.graph.GraphExchangeSession$Event(GraphExchangeSession, String, GraphExchangeSession$FolderId, GraphObject) | STYLE | DLS_DEAD_LOCAL_STORE | 181 | Medium |
| Field GraphExchangeSession$Event.vCalendar masks field in superclass davmail.exchange.ExchangeSession$Event | CORRECTNESS | MF_CLASS_MASKS_FIELD | Not available | High |
| Load of known null value in davmail.exchange.graph.GraphExchangeSession$Event.createOrUpdate() | STYLE | NP_LOAD_OF_KNOWN_NULL_VALUE | 654 | Medium |
| Exception is caught when Exception is not thrown in davmail.exchange.graph.GraphExchangeSession$Event.getEventContent() | STYLE | REC_CATCH_EXCEPTION | 246 | Medium |
davmail.exchange.graph.GraphField
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in davmail.exchange.graph.GraphField.buildGraphId() where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 387-407 | Medium |
davmail.exchange.graph.GraphObject
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.graph.GraphObject.importanceToPriorityMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 368 | Medium |
| davmail.exchange.graph.GraphObject.priorityToImportanceMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 376 | Medium |
| davmail.exchange.graph.GraphObject.taskTovTodoStatusMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 340 | Medium |
| davmail.exchange.graph.GraphObject.vTodoToTaskStatusMap is a mutable collection which should be package protected | MALICIOUS_CODE | MS_MUTABLE_COLLECTION_PKGPROTECT | 339 | Medium |
| Redundant nullcheck of key, which is known to be non-null in davmail.exchange.graph.GraphObject.getBoolean(GraphField) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 251 | Medium |
| Redundant nullcheck of key, which is known to be non-null in davmail.exchange.graph.GraphObject.optBoolean(GraphField) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 259 | Medium |
| Redundant nullcheck of key, which is known to be non-null in davmail.exchange.graph.GraphObject.optString(GraphField) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 64 | Medium |
davmail.exchange.graph.GraphRequestBuilder
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.exchange.graph.GraphRequestBuilder.setMimeContent(byte[]) may expose internal representation by storing an externally mutable object into GraphRequestBuilder.mimeContent | MALICIOUS_CODE | EI_EXPOSE_REP2 | 216 | Medium |
davmail.http.DavGatewaySSLSocketFactory
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.http.DavGatewaySSLSocketFactory.createSSLContext() might ignore java.lang.Exception | BAD_PRACTICE | DE_MIGHT_IGNORE | 115 | Medium |
| Exception is caught when Exception is not thrown in davmail.http.DavGatewaySSLSocketFactory.createSSLContext() | STYLE | REC_CATCH_EXCEPTION | 115 | Medium |
davmail.http.DavGatewayX509TrustManager
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.http.DavGatewayX509TrustManager.isCertificateTrusted(X509Certificate): new java.io.InputStreamReader(InputStream) | I18N | DM_DEFAULT_ENCODING | 107 | High |
davmail.http.DavMailNTLMEngineImpl
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Private method davmail.http.DavMailNTLMEngineImpl.encodeLong(int) is never called | PERFORMANCE | UPM_UNCALLED_PRIVATE_METHOD | 712-714 | Medium |
davmail.http.DavMailNTLMEngineImpl$CipherGen
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getClientChallenge() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.clientChallenge | MALICIOUS_CODE | EI_EXPOSE_REP | 316 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getClientChallenge2() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.clientChallenge2 | MALICIOUS_CODE | EI_EXPOSE_REP | 324 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLM2SessionResponse() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lm2SessionResponse | MALICIOUS_CODE | EI_EXPOSE_REP | 447 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLMHash() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lmHash | MALICIOUS_CODE | EI_EXPOSE_REP | 341 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLMResponse() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lmResponse | MALICIOUS_CODE | EI_EXPOSE_REP | 350 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLMUserSessionKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lmUserSessionKey | MALICIOUS_CODE | EI_EXPOSE_REP | 458 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLMv2Hash() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lmv2Hash | MALICIOUS_CODE | EI_EXPOSE_REP | 376 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLMv2Response() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lmv2Response | MALICIOUS_CODE | EI_EXPOSE_REP | 427 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getLanManagerSessionKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.lanManagerSessionKey | MALICIOUS_CODE | EI_EXPOSE_REP | 522 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLM2SessionResponse() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlm2SessionResponse | MALICIOUS_CODE | EI_EXPOSE_REP | 436 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLM2SessionResponseUserSessionKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlm2SessionResponseUserSessionKey | MALICIOUS_CODE | EI_EXPOSE_REP | 494 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMHash() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmHash | MALICIOUS_CODE | EI_EXPOSE_REP | 358 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMResponse() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmResponse | MALICIOUS_CODE | EI_EXPOSE_REP | 367 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMUserSessionKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmUserSessionKey | MALICIOUS_CODE | EI_EXPOSE_REP | 469 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMv2Blob() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmv2Blob | MALICIOUS_CODE | EI_EXPOSE_REP | 409 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMv2Hash() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmv2Hash | MALICIOUS_CODE | EI_EXPOSE_REP | 385 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMv2Response() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmv2Response | MALICIOUS_CODE | EI_EXPOSE_REP | 418 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getNTLMv2UserSessionKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.ntlmv2UserSessionKey | MALICIOUS_CODE | EI_EXPOSE_REP | 481 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getSecondaryKey() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.secondaryKey | MALICIOUS_CODE | EI_EXPOSE_REP | 332 | Medium |
| davmail.http.DavMailNTLMEngineImpl$CipherGen.getTimestamp() may expose internal representation by returning DavMailNTLMEngineImpl$CipherGen.timestamp | MALICIOUS_CODE | EI_EXPOSE_REP | 401 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.challenge | MALICIOUS_CODE | EI_EXPOSE_REP2 | 293 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.clientChallenge | MALICIOUS_CODE | EI_EXPOSE_REP2 | 295 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.clientChallenge2 | MALICIOUS_CODE | EI_EXPOSE_REP2 | 296 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.secondaryKey | MALICIOUS_CODE | EI_EXPOSE_REP2 | 297 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.targetInformation | MALICIOUS_CODE | EI_EXPOSE_REP2 | 294 | Medium |
| new davmail.http.DavMailNTLMEngineImpl$CipherGen(long, String, String, String, byte[], String, byte[], byte[], byte[], byte[], byte[]) may expose internal representation by storing an externally mutable object into DavMailNTLMEngineImpl$CipherGen.timestamp | MALICIOUS_CODE | EI_EXPOSE_REP2 | 298 | Medium |
davmail.http.DavMailX509KeyManager
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.http.DavMailX509KeyManager.chooseClientAlias(String[], String[]): new java.io.InputStreamReader(InputStream) | I18N | DM_DEFAULT_ENCODING | 168 | High |
davmail.http.HttpClientAdapter
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Redundant nullcheck of davmail.http.HttpClientAdapter.provider, which is known to be non-null in new davmail.http.HttpClientAdapter(URI, String, String, boolean) | STYLE | RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE | 230 | Medium |
| Unread field: davmail.http.HttpClientAdapter.userEmail | PERFORMANCE | URF_UNREAD_FIELD | 321 | Medium |
davmail.http.KerberosHelper$KerberosCallbackHandler
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.http.KerberosHelper$KerberosCallbackHandler.handle(Callback[]): new java.io.InputStreamReader(InputStream) | I18N | DM_DEFAULT_ENCODING | 73 | High |
davmail.http.KerberosLoginConfiguration
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.http.KerberosLoginConfiguration.getAppConfigurationEntry(String) may expose internal representation by returning KerberosLoginConfiguration.CLIENT_LOGIN_MODULE | MALICIOUS_CODE | EI_EXPOSE_REP | 81 | Medium |
| davmail.http.KerberosLoginConfiguration.getAppConfigurationEntry(String) may expose internal representation by returning KerberosLoginConfiguration.SERVER_LOGIN_MODULE | MALICIOUS_CODE | EI_EXPOSE_REP | 83 | Medium |
| davmail.http.KerberosLoginConfiguration.CLIENT_LOGIN_MODULE should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | 59 | Medium |
| davmail.http.KerberosLoginConfiguration.SERVER_LOGIN_MODULE should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | 72 | Medium |
davmail.http.NTLMMessageDecoder
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Dead store to length in davmail.http.NTLMMessageDecoder.getValues(byte[], int, String) | STYLE | DLS_DEAD_LOCAL_STORE | 179 | Medium |
| Dead store to maxLength in davmail.http.NTLMMessageDecoder.getValues(byte[], int, String) | STYLE | DLS_DEAD_LOCAL_STORE | 180 | Medium |
| Found reliance on default encoding in davmail.http.NTLMMessageDecoder.decodeMessage(): new String(byte[], int, int) | I18N | DM_DEFAULT_ENCODING | 78 | High |
| Found reliance on default encoding in davmail.http.NTLMMessageDecoder.decodeMessage(): String.getBytes() | I18N | DM_DEFAULT_ENCODING | 77 | High |
davmail.http.request.ExchangePropFindRequest
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Return value of org.apache.jackrabbit.webdav.property.DavPropertyName.getName() ignored, but method has no side effect | STYLE | RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT | 66 | Medium |
davmail.imap.ImapConnection
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.imap.ImapConnection.handleRefresh(TreeMap, TreeMap) makes inefficient use of keySet iterator instead of entrySet iterator | PERFORMANCE | WMI_WRONG_MAP_ITERATOR | 793 | Medium |
davmail.ldap.BerDecoder
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new davmail.ldap.BerDecoder(byte[], int, int) may expose internal representation by storing an externally mutable object into BerDecoder.buf | MALICIOUS_CODE | EI_EXPOSE_REP2 | 46 | Medium |
davmail.ldap.BerEncoder
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.ldap.BerEncoder.getBuf() may expose internal representation by returning BerEncoder.buf | MALICIOUS_CODE | EI_EXPOSE_REP | 102 | Medium |
davmail.ldap.HexDumpEncoder
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Found reliance on default encoding in davmail.ldap.HexDumpEncoder.encodeBuffer(byte[]): java.io.ByteArrayOutputStream.toString() | I18N | DM_DEFAULT_ENCODING | 307 | High |
| Found reliance on default encoding in davmail.ldap.HexDumpEncoder.encodeBufferPrefix(OutputStream): new java.io.PrintStream(OutputStream) | I18N | DM_DEFAULT_ENCODING | 85 | High |
davmail.ldap.LdapConnection$SearchRunnable
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Switch statement found in davmail.ldap.LdapConnection$SearchRunnable.sendPersons(int, String, Map, Set) where default case is missing | STYLE | SF_SWITCH_NO_DEFAULT | 1663-1671 | Medium |
davmail.service.DavService
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Unconditional wait in davmail.service.DavService.serviceMain(String[]) | MT_CORRECTNESS | UW_UNCOND_WAIT | 76 | Medium |
| Wait not in loop in davmail.service.DavService.serviceMain(String[]) | MT_CORRECTNESS | WA_NOT_IN_LOOP | 76 | Medium |
davmail.ui.SelectCertificateDialog
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| new davmail.ui.SelectCertificateDialog(String[], String[]) may expose internal representation by storing an externally mutable object into SelectCertificateDialog.aliases | MALICIOUS_CODE | EI_EXPOSE_REP2 | 51 | Medium |
davmail.ui.tray.AwtGatewayTray
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| davmail.ui.tray.AwtGatewayTray.activeImage should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | Not available | Medium |
| davmail.ui.tray.AwtGatewayTray.frameIcons should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | Not available | Medium |
| davmail.ui.tray.AwtGatewayTray.image should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | Not available | Medium |
| davmail.ui.tray.AwtGatewayTray.inactiveImage should be package protected | MALICIOUS_CODE | MS_PKGPROTECT | Not available | Medium |