FindBug / SpotBugs

能夠幫你找到code內不好的'味道'與隱藏的bug，下面的內容是我邊修邊記錄的內容。友藏內心的獨白: 真的找的到bug!
(*代表我認為最容易犯的錯!)

• Plugin - Find Security Bugs

• NM_METHOD_NAMING_CONVENTION
• NM_CLASS_NAMING_CONVENTION

• DMI_HARDCODED_ABSOLUTE_FILENAME
• ICAST_IDIV_CAST_TO_DOUBLE

• BX_BOXING_IMMEDIATELY_UNBOXED
• BX_BOXING_IMMEDIATELY_UNBOXED_TO_PERFORM_COERCION
• DM_NEXTINT_VIA_NEXTDOUBLE
• DM_NUMBER_CTOR
• DM_STRING_CTOR
• DM_STRING_VOID_CTOR
• SBSC_USE_STRINGBUFFER_CONCATENATION
• WMI_WRONG_MAP_ITERATOR *

• OBL_UNSATISFIED_OBLIGATION *

• DLS_DEAD_LOCAL_STORE
• RCN_REDUNDANT_NULLCHECK_OF_NULL_VALUE

• NP_NULL_ON_SOME_PATH
• BIT_IOR_OF_SIGNED_BYTE *

• EI_EXPOSE_REP *
• EI_EXPOSE_REP2 *

• XXE_DOCUMENT - XML parsing vulnerable to XXE (DocumentBuilder)
• SSL_CONTEXT - SSLContext needs to be compatible with TLS 1.2