rspec/rules/S3077/java/rule.adoc

57 lines
1.5 KiB
Plaintext
Raw Normal View History

== Why is this an issue?
2021-04-28 16:49:39 +02:00
Marking an array ``++volatile++`` means that the array itself will always be read fresh and never thread cached, but the items _in_ the array will not be. Similarly, marking a mutable object field ``++volatile++`` means the object _reference_ is ``++volatile++`` but the object itself is not, and other threads may not see updates to the object state.
This can be salvaged with arrays by using the relevant AtomicArray class, such as ``++AtomicIntegerArray++``, instead. For mutable objects, the ``++volatile++`` should be removed, and some other method should be used to ensure thread-safety, such as synchronization, or ThreadLocal storage.
=== Noncompliant code example
2021-04-28 16:49:39 +02:00
2022-02-04 17:28:24 +01:00
[source,java]
2021-04-28 16:49:39 +02:00
----
private volatile int [] vInts; // Noncompliant
private volatile MyObj myObj; // Noncompliant
----
=== Compliant solution
2021-04-28 16:49:39 +02:00
2022-02-04 17:28:24 +01:00
[source,java]
2021-04-28 16:49:39 +02:00
----
private AtomicIntegerArray vInts;
private MyObj myObj;
----
== Resources
2021-04-28 16:49:39 +02:00
* https://wiki.sei.cmu.edu/confluence/x/UzdGBQ[CERT, CON50-J.] - Do not assume that declaring a reference volatile guarantees safe publication of the members of the referenced object
ifdef::env-github,rspecator-view[]
'''
== Implementation Specification
(visible only on this page)
=== Message
* Use an "Atomic[Reference|Integer|Long]Array" instead.
* Use a thread-safe type; adding "volatile" is not enough to make this field thread-safe.
=== Highlighting
volatile [ type ]
'''
== Comments And Links
(visible only on this page)
=== on 17 Jun 2015, 14:45:38 Nicolas Peru wrote:
looks good
endif::env-github,rspecator-view[]