[
https://issues.apache.org/jira/browse/ARIES-481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dominik Przybysz closed ARIES-481.
----------------------------------
Closing issues of released artifacts
> BlueprintEvent may mutate after creation
> ----------------------------------------
>
> Key: ARIES-481
> URL: https://issues.apache.org/jira/browse/ARIES-481
> Project: Aries
> Issue Type: Bug
> Components: Blueprint
> Affects Versions: 0.2
> Reporter: Alasdair Nottingham
> Assignee: Alasdair Nottingham
> Priority: Minor
> Fix For: 0.3, blueprint-0.2.1
>
>
> Running findbugs on the org.osgi.service.blueprint package results in the
> following error:
> org.osgi.service.blueprint.container.BlueprintEvent(int, Bundle, Bundle,
> String[], Throwable) may expose internal representation by storing an
> externally mutable object into BlueprintEvent.dependencies
> MALICIOUS_CODE
> EI_EXPOSE_REP2 229 Medium
> I think the worst that can happen is that if the BlueprintContainer
> implementation changed the dependencies array it passes to the extender two
> different event handlers could see different dependencies.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
