statement always evaluates to true

statement always evaluates to true

statement always evaluates to true

statement always evaluates to true

statement always evaluates to true

statement always evaluates to true

statement always evaluates to false

statement always evaluates to false

statement always evaluates to false

statement always evaluates to false

statement always evaluates to false

statement always evaluates to false

protected finalize method calls super.finalize()

protected finalize method does not call super.finalize()

To test interactively you need to test EITHER the bad or good methods by commenting one or the other out.

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 71 Data flow: data passed as an Object reference argument from one met...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 68 Data flow: data passed as a member variable in the "a" class, which...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 67 Data flow: data passed in a class from one method to another in dif...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 66 Data flow: data passed in an array from one method to another in di...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 61 Data flow: data returned from one method to another in different cl...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 54 Data flow: data passed as an argument from one method through three...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 53 Data flow: data passed as an argument from one method through two o...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 53 Data flow: data passed as an argument from one method to another to...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 52 Data flow: data passed as an argument from one method to another to...

CWE: 566 Access through SQL primary BadSource: user id taken from url parameter GoodSource: hardcoded user id Sinks: writeConsole GoodSink: user permissions checked BadSink : user authorization not checked Flow Variant: 51 Data flow: data passed as an argument from one function to another ...