CWE-583

finalize() Method Declared Public

Medium

Description

The product violates secure coding principles for mobile code by declaring a finalize() method public.

Potential Impact

Confidentiality: Alter Execution Logic

How to Fix

Implementation

If you are using finalize() as it was designed, there is no reason to declare finalize() with anything other than protected access.

Detection Methods

Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-583 vulnerabilities in your codebase.

Get Security Assessment