Review

Detector:	MuDetectOPAL_180312
Target:	project ' itext ' version 5091
Misuse:	misuse ' dmmc-16a '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	In line 393, `StringTokenizer.nextToken()` is invoked without prior check of whether there is a next token, e.g., via `hasNextToken()`. The enclosing method implements a lookup, which may be expected to throw if there is no matching element. However, this is not explicit. (Same finding as `mudetectxp-12`)
Fix Description:
Violation Types:	missing/condition/value_or_state
In File:	com/itextpdf/text/pdf/CJKFont.java
In Method:	getBBox(int)
Code with Misuse:	`class CJKFont { private float getBBox(int idx) { String s = (String)fontDesc.get("FontBBox"); StringTokenizer tk = new StringTokenizer(s, " []\r\n\t\f"); String ret = tk.nextToken(); for (int k = 0; k < idx; ++k) ret = tk.nextToken(); return Integer.parseInt(ret); } }`

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping
?	244	0.01666666666666667	(pattern support = 10 / 25)(pattern violations = 1 / 20)(overlap = 5.00 / 6.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/SimpleNamedDestination.java#outputNamedDestinationAsNames(HashMap, PdfWriter) itext/5091/build/src/main/java//com/itextpdf/text/pdf/SimpleNamedDestination.java#createDestinationArray(String, PdfWriter) itext/5091/build/src/main/java//com/itextpdf/text/pdf/SimpleNamedDestination.java#outputNamedDestinationAsStrings(HashMap, PdfWriter) itext/5091/build/src/main/java//com/itextpdf/text/html/simpleparser/ElementFactory.java#setParagraphLeading(Paragraph, String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/CJKFont.java#createMetric(String)	10
?	6931	0.0001268450184501845	(pattern support = 11 / 25)(pattern violations = 1 / 1084)(overlap = 5.00 / 16.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontUnicode.java#writeFont(PdfWriter, PdfIndirectReference, Object[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfObject.java#setContent(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontSubSet.java#writeFontString(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncodings.java#convertToBytes(char, String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfDocument.java#addFileAttachment(String, PdfFileSpecification)	11