JD.UN.METJD.UN.MET occurs if no call for method is found in the analyzed code. (This checker is triggered only by non-private methods that were not overloaded, or did not overload something). Vulnerability and riskUnused methods can be used as back doors. They also increase code footprint in memory. Additionally, they increase the size of source code which decreases maintainability. Mitigation and preventionRemove unused methods. Be careful when removing methods. Make sure the method was not designed for extensibility or is not a library method that may be used by code that is not part of the code you are analyzing with Klocwork. Example 1
9 static class MyClass {
10 void foo(){
11 System.err.println("Hello, World!");
12 }
13 }
JD.UN.MET is reported for method declaration on line 10: Method 'foo()' is never called in the analyzed context. Security guidelinesRelated checkers |