Built by Maven

SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.9.8

Threshold is medium

Effort is max

Summary

Classes Bugs Errors Missing Classes
6 37 0 0

Files

Class Bugs
com.github.hazendaz.maven.makeself_maven_plugin.HelpMojo 2
com.hazendaz.maven.makeself.MakeselfMojo 33
com.hazendaz.maven.makeself.PortableGit 1
com.hazendaz.maven.makeself.PortableGitTest 1

com.github.hazendaz.maven.makeself_maven_plugin.HelpMojo

Bug Category Details Line Priority
Instance field com.github.hazendaz.maven.makeself_maven_plugin.HelpMojo.goal likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
The use of DocumentBuilder.parse(...) (DocumentBuilder) is vulnerable to XML External Entity attacks SECURITY XXE_DOCUMENT 77 Medium

com.hazendaz.maven.makeself.MakeselfMojo

Bug Category Details Line Priority
Method com.hazendaz.maven.makeself.MakeselfMojo.loadArgs() is excessively complex, with a cyclomatic complexity of 55 STYLE CC_CYCLOMATIC_COMPLEXITY 942 Medium
This usage of java/lang/ProcessBuilder.<init>(Ljava/util/List;)V can be vulnerable to Command Injection SECURITY COMMAND_INJECTION 717 Medium
Method com.hazendaz.maven.makeself.MakeselfMojo.extractPortableGit() throws alternative exception from catch block without history CORRECTNESS LEST_LOST_EXCEPTION_STACK_TRACE 854 Medium
Possible null pointer dereference in com.hazendaz.maven.makeself.MakeselfMojo.installGit(Artifact, String) due to return value of called method STYLE NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE 888 Medium
Overly permissive file permission can lead to privilege escalation or information leakage. SECURITY OVERLY_PERMISSIVE_FILE_PERMISSION 923 Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.archiveDir likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.buildTarget likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.classifier likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.cleanupScript likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.compExtra likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.complevel likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.extension likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.extractTargetDir likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.fileName likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.gpgExtraOpt likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.headerFile likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.helpHeaderFile likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.label likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.licenseFile likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.lsmFile likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.packagingDate likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.preextractScript likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.signPassphrase likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.sslPassSrc likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.sslPasswd likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.startupScript likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.tarExtraOpt likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.tarFormatOpt likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.threads likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
Instance field com.hazendaz.maven.makeself.MakeselfMojo.untarExtraOpt likely could be defined as static CORRECTNESS SPP_FIELD_COULD_BE_STATIC Not available Medium
This method com.hazendaz.maven.makeself.MakeselfMojo.execute() parses a String that is a field STYLE STT_STRING_PARSING_A_FIELD 624 Medium
This method com.hazendaz.maven.makeself.MakeselfMojo.execute() parses a String that is a field STYLE STT_STRING_PARSING_A_FIELD 627 Medium
Unwritten field: com.hazendaz.maven.makeself.MakeselfMojo.extractTargetDir CORRECTNESS UWF_UNWRITTEN_FIELD 1233 Medium

com.hazendaz.maven.makeself.PortableGit

Bug Category Details Line Priority
Exception thrown in class com.hazendaz.maven.makeself.PortableGit at new com.hazendaz.maven.makeself.PortableGit(Log) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 126 Medium

com.hazendaz.maven.makeself.PortableGitTest

Bug Category Details Line Priority
Method com.hazendaz.maven.makeself.PortableGitTest.processGitTest() excessively uses methods of another class STYLE CE_CLASS_ENVY 38-45 Medium