56 lines
2.0 KiB
Plaintext
56 lines
2.0 KiB
Plaintext
Comparisons of dissimilar types will always return false. The comparison and all its dependent code can simply be removed. This includes:
|
|
|
|
* comparing an object with null
|
|
* comparing an object with an unrelated primitive (E.G. a string with an int)
|
|
* comparing unrelated classes
|
|
* comparing an unrelated <code>class</code> and <code>interface</code>
|
|
* comparing unrelated <code>interface</code> types
|
|
* comparing an array to a non-array
|
|
* comparing two arrays
|
|
|
|
Specifically in the case of arrays, since arrays don't override <code>Object.equals()</code>, calling <code>equals</code> on two arrays is the same as comparing their addresses. This means that <code>array1.equals(array2)</code> is equivalent to <code>array1==array2</code>.
|
|
However, some developers might expect <code>Array.equals(Object obj)</code> to do more than a simple memory address comparison, comparing for instance the size and content of the two arrays. Instead, the <code>==</code> operator or <code>Arrays.equals(array1, array2)</code> should always be used with arrays.
|
|
|
|
== Noncompliant Code Example
|
|
|
|
----
|
|
interface KitchenTool { ... };
|
|
interface Plant {...}
|
|
|
|
public class Spatula implements KitchenTool { ... }
|
|
public class Tree implements Plant { ...}
|
|
//...
|
|
|
|
Spatula spatula = new Spatula();
|
|
KitchenTool tool = spatula;
|
|
KitchenTool [] tools = {tool};
|
|
|
|
Tree tree = new Tree();
|
|
Plant plant = tree;
|
|
Tree [] trees = {tree};
|
|
|
|
|
|
if (spatula.equals(tree)) { // Noncompliant; unrelated classes
|
|
// ...
|
|
}
|
|
else if (spatula.equals(plant)) { // Noncompliant; unrelated class and interface
|
|
// ...
|
|
}
|
|
else if (tool.equals(plant)) { // Noncompliant; unrelated interfaces
|
|
// ...
|
|
}
|
|
else if (tool.equals(tools)) { // Noncompliant; array & non-array
|
|
// ...
|
|
}
|
|
else if (trees.equals(tools)) { // Noncompliant; incompatible arrays
|
|
// ...
|
|
}
|
|
else if (tree.equals(null)) { // Noncompliant
|
|
// ...
|
|
}
|
|
----
|
|
|
|
== See
|
|
|
|
* https://www.securecoding.cert.org/confluence/x/IQAlAg[CERT, EXP02-J.] - Do not use the Object.equals() method to compare two arrays
|