Review

Detector:	MuDetectOPAL_180320
Target:	project ' itext ' version 5091
Misuse:	misuse ' dmmc-357 '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	On line 508, `Iterator.next()` is invoked without prior check that there are sufficiently many elements. (Same finding as `mudetect-2` and `mudetectxp-2`)
Fix Description:
Violation Types:	missing/condition/value_or_state
In File:	com/itextpdf/text/pdf/PdfWriter.java
In Method:	writeCrossReferenceTable(OutputStream, PdfIndirectReference, PdfIndirectReference, PdfIndirectReference, PdfObject, long)
Code with Misuse:	class PdfWriter.PdfBody { void writeCrossReferenceTable(final OutputStream os, final PdfIndirectReference root, final PdfIndirectReference info, final PdfIndirectReference encryption, final PdfObject fileID, final long prevxref) throws IOException { int refNumber = 0; if (writer.isFullCompression()) { flushObjStm(); refNumber = getIndirectReferenceNumber(); xrefs.add(new PdfCrossReference(refNumber, position)); } PdfCrossReference entry = xrefs.first(); int first = entry.getRefnum(); int len = 0; ArrayList<Integer> sections = new ArrayList<Integer>(); for (PdfCrossReference pdfCrossReference : xrefs) { entry = pdfCrossReference; if (first + len == entry.getRefnum()) ++len; else { sections.add(Integer.valueOf(first)); sections.add(Integer.valueOf(len)); first = entry.getRefnum(); len = 1; } } sections.add(Integer.valueOf(first)); sections.add(Integer.valueOf(len)); if (writer.isFullCompression()) { int mid = 5; long mask = 0xff00000000L; for (; mid > 1; --mid) { if ((mask & position) != 0) break; mask >>>= 8; } ByteBuffer buf = new ByteBuffer(); for (Object element : xrefs) { entry = (PdfCrossReference) element; entry.toPdf(mid, buf); } PdfStream xr = new PdfStream(buf.toByteArray()); buf = null; xr.flateCompress(writer.getCompressionLevel()); xr.put(PdfName.SIZE, new PdfNumber(size())); xr.put(PdfName.ROOT, root); if (info != null) { xr.put(PdfName.INFO, info); } if (encryption != null) xr.put(PdfName.ENCRYPT, encryption); if (fileID != null) xr.put(PdfName.ID, fileID); xr.put(PdfName.W, new PdfArray(new int[]{1, mid, 2})); xr.put(PdfName.TYPE, PdfName.XREF); PdfArray idx = new PdfArray(); for (int k = 0; k < sections.size(); ++k) idx.add(new PdfNumber(sections.get(k).intValue())); xr.put(PdfName.INDEX, idx); if (prevxref > 0) xr.put(PdfName.PREV, new PdfNumber(prevxref)); PdfEncryption enc = writer.crypto; writer.crypto = null; PdfIndirectObject indirect = new PdfIndirectObject(refNumber, xr, writer); indirect.writeTo(writer.getOs()); writer.crypto = enc; } else { os.write(getISOBytes("xref\n")); Iterator<PdfCrossReference> i = xrefs.iterator(); for (int k = 0; k < sections.size(); k += 2) { first = sections.get(k).intValue(); len = sections.get(k + 1).intValue(); os.write(getISOBytes(String.valueOf(first))); os.write(getISOBytes(" ")); os.write(getISOBytes(String.valueOf(len))); os.write('\n'); while (len-- > 0) { entry = i.next(); entry.toPdf(os); } } } } }

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation
?	47	0.03577441077441077	(pattern support = 10 / 24)(pattern violations = 1 / 11)(overlap = 17.00 / 18.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#addToObjStm(PdfObject, int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#writeCrossReferenceTable(OutputStream, PdfIndirectReference, PdfIndirectReference, PdfIndirectReference, PdfObject, long) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#access$000(PdfWriter$PdfBody) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#close() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter$PdfBody#flushObjStm()	10
?	48	0.03577441077441077	(pattern support = 10 / 24)(pattern violations = 1 / 11)(overlap = 17.00 / 18.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#addToObjStm(PdfObject, int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#writeCrossReferenceTable(OutputStream, PdfIndirectReference, PdfIndirectReference, PdfIndirectReference, PdfObject, long) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#access$000(PdfWriter$PdfBody) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#close() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter$PdfBody#flushObjStm()	10
?	76	0.026041666666666668	(pattern support = 10 / 24)(pattern violations = 1 / 8)(overlap = 3.00 / 6.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#addSharedObjectsToBody() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#addASEvent(PdfName, PdfName) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#fillOCProperties(boolean) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#close() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfStamperImp.java#addFieldResources()	10
?	2515	0.001708984375	(pattern support = 14 / 24)(pattern violations = 1 / 256)(overlap = 3.00 / 4.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfDocument.java#traverseOutlineCount(PdfOutline) itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#inverseSearchGlobal(ArrayList) itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields#getSignatureNames() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#eliminateSharedStreams() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReaderInstance#writeAllVisited()	14
?	2516	0.001708984375	(pattern support = 14 / 24)(pattern violations = 1 / 256)(overlap = 3.00 / 4.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfDocument.java#traverseOutlineCount(PdfOutline) itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#inverseSearchGlobal(ArrayList) itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields#getSignatureNames() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#eliminateSharedStreams() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReaderInstance#writeAllVisited()	14
?	3163	0.0013316761363636363	(pattern support = 15 / 24)(pattern violations = 1 / 384)(overlap = 9.00 / 11.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfContentByte.java#closePath() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfContentByte.java#newPath() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfContentByte.java#setCMYKColorFillF(float, float, float, float) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfContentByte.java#newlineText() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfContentByte.java#setCMYKColorStrokeF(float, float, float, float)	15
?	3189	0.0012703252032520327	(pattern support = 10 / 24)(pattern violations = 1 / 205)(overlap = 5.00 / 8.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#processTemplate(Node, HashMap) itext/5091/build/src/main/java//com/itextpdf/text/pdf/CFFFontSubset#ReadASubr(int, int, int, int, HashMap, ArrayList, int[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/fonts/cmaps/CMapToUnicode.java#createDirectMapping() itext/5091/build/src/main/java//com/itextpdf/text/pdf/GlyphList.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFont.java#readFormat4()	10
?	3190	0.0012703252032520327	(pattern support = 10 / 24)(pattern violations = 1 / 205)(overlap = 5.00 / 8.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#processTemplate(Node, HashMap) itext/5091/build/src/main/java//com/itextpdf/text/pdf/CFFFontSubset#ReadASubr(int, int, int, int, HashMap, ArrayList, int[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/fonts/cmaps/CMapToUnicode.java#createDirectMapping() itext/5091/build/src/main/java//com/itextpdf/text/pdf/GlyphList.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFont.java#readFormat4()	10
?	3191	0.0012703252032520327	(pattern support = 10 / 24)(pattern violations = 1 / 205)(overlap = 5.00 / 8.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#processTemplate(Node, HashMap) itext/5091/build/src/main/java//com/itextpdf/text/pdf/CFFFontSubset#ReadASubr(int, int, int, int, HashMap, ArrayList, int[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/fonts/cmaps/CMapToUnicode.java#createDirectMapping() itext/5091/build/src/main/java//com/itextpdf/text/pdf/GlyphList.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFont.java#readFormat4()	10
?	3192	0.0012703252032520327	(pattern support = 10 / 24)(pattern violations = 1 / 205)(overlap = 5.00 / 8.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/XfaForm.java#processTemplate(Node, HashMap) itext/5091/build/src/main/java//com/itextpdf/text/pdf/CFFFontSubset#ReadASubr(int, int, int, int, HashMap, ArrayList, int[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/fonts/cmaps/CMapToUnicode.java#createDirectMapping() itext/5091/build/src/main/java//com/itextpdf/text/pdf/GlyphList.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFont.java#readFormat4()	10
?	5134	0.0004660121784515969	(pattern support = 10 / 24)(pattern violations = 1 / 619)(overlap = 9.00 / 13.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar#getBarsCodabar(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#getBarcodeSize() itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#calculateChecksum(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#createAwtImage(Color, Color)	10
?	5135	0.0004660121784515969	(pattern support = 10 / 24)(pattern violations = 1 / 619)(overlap = 9.00 / 13.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar#getBarsCodabar(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#getBarcodeSize() itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#calculateChecksum(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#createAwtImage(Color, Color)	10
?	5136	0.0004660121784515969	(pattern support = 10 / 24)(pattern violations = 1 / 619)(overlap = 9.00 / 13.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar#getBarsCodabar(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#getBarcodeSize() itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#calculateChecksum(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#createAwtImage(Color, Color)	10
?	5137	0.0004660121784515969	(pattern support = 10 / 24)(pattern violations = 1 / 619)(overlap = 9.00 / 13.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar#getBarsCodabar(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#getBarcodeSize() itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#calculateChecksum(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/BarcodeCodabar.java#createAwtImage(Color, Color)	10
?	6537	0.0004177109440267335	(pattern support = 12 / 24)(pattern violations = 1 / 399)(overlap = 1.00 / 3.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#addToObjStm(PdfObject, int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#toPdf(PdfWriter, OutputStream) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#access$000(PdfWriter$PdfBody) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfWriter.java#close() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#getFileID()	12
?	7443	0.00030864197530864197	(pattern support = 11 / 24)(pattern violations = 1 / 1155)(overlap = 7.00 / 9.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfNumberTree.java#writeTree(HashMap, PdfWriter) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfAnnotation.java#setMKBackgroundColor(BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfShading.java#type2(PdfWriter, BaseColor, float[], float[], PdfFunction, boolean[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/codec/PngImage.java#getColorspace() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfStamperImp.java#insertPage(int, Rectangle)	11
?	8535	0.0001725327812284334	(pattern support = 16 / 24)(pattern violations = 1 / 805)(overlap = 5.00 / 24.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfAction.java#setOCGstate(ArrayList, boolean) itext/5091/build/src/main/java//com/itextpdf/text/pdf/Barcode39.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields.java#setListOption(String, String[], String[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/Barcode128.java#setCode(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/ICC_Profile.java#getInstance(byte[])	16
?	8536	0.0001725327812284334	(pattern support = 16 / 24)(pattern violations = 1 / 805)(overlap = 5.00 / 24.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfAction.java#setOCGstate(ArrayList, boolean) itext/5091/build/src/main/java//com/itextpdf/text/pdf/Barcode39.java#placeBarcode(PdfContentByte, BaseColor, BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields.java#setListOption(String, String[], String[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/Barcode128.java#setCode(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/ICC_Profile.java#getInstance(byte[])	16
?	8570	0.00017006802721088434	(pattern support = 11 / 24)(pattern violations = 1 / 1155)(overlap = 3.00 / 7.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfNumberTree.java#writeTree(HashMap, PdfWriter) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfAnnotation.java#setMKBackgroundColor(BaseColor) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfShading.java#type2(PdfWriter, BaseColor, float[], float[], PdfFunction, boolean[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/codec/PngImage.java#getColorspace() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfStamperImp.java#insertPage(int, Rectangle)	11
?	18104	0.0000070102220721515425	(pattern support = 12 / 24)(pattern violations = 1 / 7999)(overlap = 12.00 / 107.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontUnicode.java#writeFont(PdfWriter, PdfIndirectReference, Object[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getOriginalBytes() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PRIndirectReference.java#toPdf(PdfWriter, OutputStream) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getBytes()	12	The graph contained more than 40 nodes (101) and is likely unreadable. Skipping generation.
?	18105	0.0000070102220721515425	(pattern support = 12 / 24)(pattern violations = 1 / 7999)(overlap = 12.00 / 107.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontUnicode.java#writeFont(PdfWriter, PdfIndirectReference, Object[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getOriginalBytes() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PRIndirectReference.java#toPdf(PdfWriter, OutputStream) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getBytes()	12	The graph contained more than 40 nodes (101) and is likely unreadable. Skipping generation.
?	18106	0.0000070102220721515425	(pattern support = 12 / 24)(pattern violations = 1 / 7999)(overlap = 12.00 / 107.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontUnicode.java#writeFont(PdfWriter, PdfIndirectReference, Object[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getOriginalBytes() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PRIndirectReference.java#toPdf(PdfWriter, OutputStream) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getBytes()	12	The graph contained more than 40 nodes (101) and is likely unreadable. Skipping generation.
?	18107	0.0000070102220721515425	(pattern support = 12 / 24)(pattern violations = 1 / 7999)(overlap = 12.00 / 107.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/TrueTypeFontUnicode.java#writeFont(PdfWriter, PdfIndirectReference, Object[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getOriginalBytes() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PRIndirectReference.java#toPdf(PdfWriter, OutputStream) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfString.java#getBytes()	12	The graph contained more than 40 nodes (101) and is likely unreadable. Skipping generation.