Review

Detector:	MuDetect_180221_BestRanking
Target:	project ' chensun ' version cf23b99
Misuse:	misuse ' jadet-1a '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	The `PreparedStatement` opened in line 636 is never closed. (Same as MuDetect findings 18)
Fix Description:
Violation Types:	missing/call
In File:	database/SocialNetworkDatabasePosts.java
In Method:	getPost(Connection, String, String, String, int)
Code with Misuse:	class SocialNetworkDatabasePosts { /** Gets a post from the designated board and region * with the given post number. * ASSUMES that the board, region, and post are all valid. / public static String getPost(Connection conn, String username, String boardName, String regionName, int postNum) { String getOriginalPost = ""; String getReplies = ""; String postAndReplies = ""; /No joining of results because of redundancy of data returned/ if (boardName.equals("freeforall")) { getOriginalPost = "SELECT FROM freeforall.posts " + "WHERE pid = ?"; getReplies = "SELECT * FROM freeforall.replies " + "WHERE pid = ? ORDER BY dateReplied ASC"; } else { getOriginalPost = "SELECT * FROM " + boardName + ".posts " + "WHERE pid = ? AND rname = ?"; getReplies = "SELECT * FROM " + boardName + ".replies " + "WHERE pid = ? AND rname = ? ORDER BY dateReplied ASC"; } PreparedStatement originalPost = null; ResultSet postResult = null; PreparedStatement replies = null; ResultSet repliesResult = null; boolean sqlex = false; try { originalPost = conn.prepareStatement(getOriginalPost); replies = conn.prepareStatement(getReplies); originalPost.setInt(1, postNum); replies.setInt(1, postNum); if (!boardName.equals("freeforall")) { originalPost.setString(2, regionName); replies.setString(2, regionName); } postResult = originalPost.executeQuery(); if (postResult.next()) { /Only expect one post result/ //Make sure the checksum is correct if (!Arrays.equals( Hash.generateChecksum((SharedKeyCrypto.decrypt(postResult.getString("content"))).getBytes("UTF8")), CryptoUtil.decode(postResult.getString("checksum")))) { postAndReplies += "print ----- Post# " + postNum + "[" + postResult.getString("postedBy") + "]----- " + postResult.getTimestamp("datePosted").toString() + ";print \t" + "Content could not be fetched -- Integrity Failure!" + ";"; } else { postAndReplies += "print ----- Post# " + postNum + "[" + postResult.getString("postedBy") + "]----- " + postResult.getTimestamp("datePosted").toString() + ";print \t" + SharedKeyCrypto.decrypt(postResult.getString("content")) + ";"; } repliesResult = replies.executeQuery(); while (repliesResult.next()) { //Print out all replies //for each reply, make sure the checksum is correct. if(!Arrays.equals( Hash.generateChecksum((SharedKeyCrypto.decrypt(repliesResult.getString("content"))).getBytes("UTF8")), CryptoUtil.decode(repliesResult.getString("checksum")))) { postAndReplies += "print ----- Reply[" + repliesResult.getString("repliedBy") + "] ----- " + repliesResult.getTimestamp("dateReplied").toString() + ";print \t" + "Content could not be fetched -- Integrity Failure!" + ";"; } else { postAndReplies += "print ----- Reply[" + repliesResult.getString("repliedBy") + "] ----- " + repliesResult.getTimestamp("dateReplied").toString() + ";print \t" + SharedKeyCrypto.decrypt(repliesResult.getString("content")) + ";"; } } } // if there's no postResult, the post DNE. } catch (SQLException e) { e.printStackTrace(); sqlex = true; } catch (UnsupportedEncodingException e) { // This should not happen. } if (postAndReplies.equals("") && !sqlex) { return "print Error: Post does not exist. Refresh. If the problem persists, contact an admin."; } else if (sqlex) { return "print Error: Database error while querying post and replies. Contact an admin."; } else return postAndReplies; } }

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping
?	18	0.23275862068965517	(overlap = 27.00 / 29.00)(pattern support = 11 / 22)(violation support = 1 / 2)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#addUser(Connection, String, String, int, String) chensun/cf23b99/build/CS5430/src/database/SocialNetworkDatabaseRegions.java#createRegion(Connection, String, String, String) chensun/cf23b99/build/CS5430/src/database/DatabaseDBA.java#createAcappellaGroup(Connection, String, String, String, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#deleteRegRequest(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#changeRole(Connection, String, String)	11
?	19	0.225	(overlap = 36.00 / 40.00)(pattern support = 11 / 22)(violation support = 1 / 2)	chensun/cf23b99/build/CS5430/src/database/SocialNetworkDatabaseRegions.java#isRegionManager(Connection, String, String, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getRegReqCount(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendReqCount(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	11
?	116	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	117	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	118	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	119	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	120	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	121	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	122	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	123	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	124	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10
?	125	0.0066410861865407326	(overlap = 9.00 / 11.00)(pattern support = 10 / 22)(violation support = 1 / 56)	chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdmins(Connection) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfGroup(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriends(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getFriendRequestList(Connection, String) chensun/cf23b99/build/CS5430/src/database/DatabaseAdmin.java#getAdminsOfBoard(Connection, String)	10