Review

Detector:	MuDetectRankComp_180222_ExcludeInstances
Target:	project ' itext ' version 5091
Misuse:	misuse ' dmmc-16 '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	In line 396, `StringTokenizer.nextToken()` is invoked repeatedly in a loop without prior check of whether there are sufficiently many tokens, e.g., via `hasNextToken()`. The enclosing method implements a lookup, which may be expected to throw if there is no matching element. However, this is not explicit.
Fix Description:
Violation Types:	missing/condition/value_or_state
In File:	com/itextpdf/text/pdf/CJKFont.java
In Method:	getBBox(int)
Code with Misuse:	`class CJKFont { private float getBBox(int idx) { String s = (String)fontDesc.get("FontBBox"); StringTokenizer tk = new StringTokenizer(s, " []\r\n\t\f"); String ret = tk.nextToken(); for (int k = 0; k < idx; ++k) ret = tk.nextToken(); return Integer.parseInt(ret); } }`

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit

Rank

Confidence

Confidence String

Pattern Examples

Pattern Support

Pattern Violation

Target Environment Mapping

841

Strategy	Rank	Desc
	898	()
Confidence	149	10 / (10 + 28)
DefectIndicator	25	(1 / 28 (StringTokenizer)) * 10 / 4
O-E2MN	1193	(overlap = 3.00 / 4.00)
O-E2MN*PS	1774	(overlap = 3.00 / 4.00)*(pattern support = 10 / 73)
O-E2MNPSPU	38	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(1 / 28 (StringTokenizer))
O-E2MNPSPV	128	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)
O-E2MNPSPV*PU	42	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)*(1 / 28 (StringTokenizer))
O-E2MNPSPV*VS	94	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)*(violation support = 1 / 4)
O-E2MNPSPVVSPU	35	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
O-E2MNPSVS	309	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(violation support = 1 / 4)
O-E2MNPSVS*PU	25	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
O-E2MN*PU	34	(overlap = 3.00 / 4.00)*(1 / 28 (StringTokenizer))
O-E2MN*PV	115	(overlap = 3.00 / 4.00)*(pattern violations = 1 / 28)
O-E2MNPVPU	38	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(1 / 28 (StringTokenizer))
O-E2MNPVVS	72	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(violation support = 1 / 4)
O-E2MNPVVS*PU	30	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
O-E2MN*VS	168	(overlap = 3.00 / 4.00)*(violation support = 1 / 4)
O-E2MNVSPU	24	(overlap = 3.00 / 4.00)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
PS	1867	(pattern support = 10 / 73)
PS*PU	37	(pattern support = 10 / 73)*(1 / 28 (StringTokenizer))
PS*PV	149	(pattern support = 10 / 73)*(pattern violations = 1 / 28)
PSPVPU	41	(pattern support = 10 / 73)(pattern violations = 1 / 28)(1 / 28 (StringTokenizer))
PSPVVS	89	(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)
PSPVVS*PU	35	(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
PS*VS	259	(pattern support = 10 / 73)*(violation support = 1 / 4)
PSVSPU	25	(pattern support = 10 / 73)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
PU	33	(1 / 28 (StringTokenizer))
PV	114	(pattern violations = 1 / 28)
PV*PU	37	(pattern violations = 1 / 28)*(1 / 28 (StringTokenizer))
PV*VS	78	(pattern violations = 1 / 28)*(violation support = 1 / 4)
PVVSPU	30	(pattern violations = 1 / 28)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
Rareness	259	1 - (4 / 10)
VS	157	(violation support = 1 / 4)
VS*PU	24	(violation support = 1 / 4)*(1 / 28 (StringTokenizer))

itext/5091/build/src/main/java/com/itextpdf/text/pdf/BaseFont.java#createEncoding()
itext/5091/build/src/main/java/com/itextpdf/text/pdf/PdfCopyFieldsImp.java#mergeField(String, Item)
itext/5091/build/src/main/java/com/itextpdf/text/html/HtmlUtilities.java#parseAttributes(String)
itext/5091/build/src/main/java/com/itextpdf/text/html/simpleparser/ElementFactory.java#setParagraphLeading(Paragraph, String)
itext/5091/build/src/main/java/com/itextpdf/text/pdf/FdfWriter.java#removeField(String)

1008

Strategy	Rank	Desc
	899	()
Confidence	150	10 / (10 + 28)
DefectIndicator	26	(1 / 28 (StringTokenizer)) * 10 / 4
O-E2MN	1194	(overlap = 3.00 / 4.00)
O-E2MN*PS	1775	(overlap = 3.00 / 4.00)*(pattern support = 10 / 73)
O-E2MNPSPU	39	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(1 / 28 (StringTokenizer))
O-E2MNPSPV	129	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)
O-E2MNPSPV*PU	43	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)*(1 / 28 (StringTokenizer))
O-E2MNPSPV*VS	95	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)*(violation support = 1 / 4)
O-E2MNPSPVVSPU	36	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
O-E2MNPSVS	310	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(violation support = 1 / 4)
O-E2MNPSVS*PU	26	(overlap = 3.00 / 4.00)(pattern support = 10 / 73)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
O-E2MN*PU	35	(overlap = 3.00 / 4.00)*(1 / 28 (StringTokenizer))
O-E2MN*PV	116	(overlap = 3.00 / 4.00)*(pattern violations = 1 / 28)
O-E2MNPVPU	39	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(1 / 28 (StringTokenizer))
O-E2MNPVVS	73	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(violation support = 1 / 4)
O-E2MNPVVS*PU	31	(overlap = 3.00 / 4.00)(pattern violations = 1 / 28)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
O-E2MN*VS	169	(overlap = 3.00 / 4.00)*(violation support = 1 / 4)
O-E2MNVSPU	25	(overlap = 3.00 / 4.00)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
PS	1866	(pattern support = 10 / 73)
PS*PU	38	(pattern support = 10 / 73)*(1 / 28 (StringTokenizer))
PS*PV	150	(pattern support = 10 / 73)*(pattern violations = 1 / 28)
PSPVPU	42	(pattern support = 10 / 73)(pattern violations = 1 / 28)(1 / 28 (StringTokenizer))
PSPVVS	90	(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)
PSPVVS*PU	36	(pattern support = 10 / 73)(pattern violations = 1 / 28)(violation support = 1 / 4)*(1 / 28 (StringTokenizer))
PS*VS	260	(pattern support = 10 / 73)*(violation support = 1 / 4)
PSVSPU	26	(pattern support = 10 / 73)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
PU	34	(1 / 28 (StringTokenizer))
PV	115	(pattern violations = 1 / 28)
PV*PU	38	(pattern violations = 1 / 28)*(1 / 28 (StringTokenizer))
PV*VS	79	(pattern violations = 1 / 28)*(violation support = 1 / 4)
PVVSPU	31	(pattern violations = 1 / 28)(violation support = 1 / 4)(1 / 28 (StringTokenizer))
Rareness	260	1 - (4 / 10)
VS	158	(violation support = 1 / 4)
VS*PU	25	(violation support = 1 / 4)*(1 / 28 (StringTokenizer))

itext/5091/build/src/main/java/com/itextpdf/text/pdf/BaseFont.java#createEncoding()
itext/5091/build/src/main/java/com/itextpdf/text/pdf/PdfCopyFieldsImp.java#mergeField(String, Item)
itext/5091/build/src/main/java/com/itextpdf/text/html/HtmlUtilities.java#parseAttributes(String)
itext/5091/build/src/main/java/com/itextpdf/text/html/simpleparser/ElementFactory.java#setParagraphLeading(Paragraph, String)
itext/5091/build/src/main/java/com/itextpdf/text/pdf/FdfWriter.java#removeField(String)