About GET A DEMO

Backslash Vulnerability Database

clone() Method Without super.clone()

clone() Method Without super.clone()

CWE-580

Short description

The product contains a clone() method that does not call super.clone() to obtain the new object.

Extended description

All implementations of clone() should obtain the new object by calling super.clone(). If a class does not follow this convention, a subclass's clone() method will return an object of the wrong type.

Best practices to prevent this CWE

Phase: Implementation

Call super.clone() within your clone() method, when obtaining a new object.

Phase: Implementation

In some cases, you can eliminate the clone method altogether and use copy constructors.

Prioritize and Uncover Reachable Vulnerabilities in Your Application Code

Identify externally reachable data flows and vulnerabilities for effective risk mitigation

© 2023 Backslash. 28 HaArba'a St., Tel-Aviv Privacy Policy | Terms of Use