Skip to content

HP Fortify false positives#1232

Merged
rfecher merged 1 commit intomasterfrom
threadfix-changes
Nov 16, 2017
Merged

HP Fortify false positives#1232
rfecher merged 1 commit intomasterfrom
threadfix-changes

Conversation

@mawhitby
Copy link
Copy Markdown
Contributor

No description provided.


// HP Fortify "Null Dereference" false positive
// Null checking is done in the next line
String s3EndpointUrl = configProperties.getProperty(ConfigAWSCommand.AWS_S3_ENDPOINT_URL);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

its talking about configProperties, this one's a true-positive (line 151 configProperties is set to null and is only set to non-null within a conditional)


// HP Fortify "Portability Flaw" false positive
// This is purposefully kept dynamic so help solve portability problems.
final ClientConfiguration clientConfig = new ClientConfiguration()
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lets just delete toLowerCase on line 65 and change equals on line 73 to equalsIgnoreCase()

@coveralls
Copy link
Copy Markdown

Coverage Status

Coverage decreased (-15.8%) to 33.411% when pulling 64e0629 on threadfix-changes into a42263d on master.

@coveralls
Copy link
Copy Markdown

coveralls commented Nov 16, 2017

Coverage Status

Coverage decreased (-0.006%) to 49.247% when pulling 7790b2a on threadfix-changes into a42263d on master.

@rfecher rfecher merged commit cdcf56d into master Nov 16, 2017
@rfecher rfecher deleted the threadfix-changes branch November 16, 2017 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants