Examples of errors detected by the V6060 diagnostic

V6060. The reference was used before it was verified against null.

Bouncy Castle

V6060 [CWE-476] The 'params' reference was utilized before it was verified against null. Check lines: 27, 25. XMSSMTPrivateKeyParameters.java 27

private XMSSMTPrivateKeyParameters(Builder builder)
{
  super(true, builder.params.getDigest().getAlgorithmName());
  params = builder.params;
  if (params == null)
  {
    throw new NullPointerException("params == null");
  }
  ....
}

Similar errors can be found in some other places:

• V6060 [CWE-476] The 'clientCertificate' reference was utilized before it was verified against null. Check lines: 110, 99. MockTlsServer.java 110
• V6060 [CWE-476] The 'readCrl' reference was utilized before it was verified against null. Check lines: 2461, 2459. CertTest.java 2461
• V6060 [CWE-476] The 'serverCertificate' reference was utilized before it was verified against null. Check lines: 118, 107. MockTlsClient.java 118
• And 5 additional diagnostic messages.

Elasticsearch

V6060 The 'node' reference was utilized before it was verified against null. RestTasksAction.java(152), RestTasksAction.java(151)

private void buildRow(Table table, boolean fullId,
                      boolean detailed, DiscoveryNodes discoveryNodes,
                      TaskInfo taskInfo) {
    ....
  DiscoveryNode node = discoveryNodes.get(nodeId);
  ....
  // Node information. Note that the node may be null because it has
  // left the cluster between when we got this response and now.
  table.addCell(fullId ? nodeId : Strings.substring(nodeId, 0, 4));
  table.addCell(node == null ? "-" : node.getHostAddress());
  table.addCell(node.getAddress().address().getPort());
  table.addCell(node == null ? "-" : node.getName());
  table.addCell(node == null ? "-" : node.getVersion().toString());
  ....
}

Elasticsearch

V6060 The 'cause' reference was utilized before it was verified against null. StartupException.java(76), StartupException.java(73)

private void printStackTrace(Consumer<String> consumer) {
    Throwable originalCause = getCause();
    Throwable cause = originalCause;
    if (cause instanceof CreationException) {
        cause = getFirstGuiceCause((CreationException)cause);
    }

    String message = cause.toString();         // <=
    consumer.accept(message);

    if (cause != null) {                       // <=
        // walk to the root cause
        while (cause.getCause() != null) {
            cause = cause.getCause();
        }
        ....
    }
    ....
}