JAVA.IO.HWID : Use of Hardware ID (Java)

JavaScript is not currently enabled, but is required for full CodeSonar manual search and browse functionality.

If you are viewing this file in your hub's Web GUI, enable JavaScript in your browser: you will also need it for GUI functionality.

If you opened this file directly from disk, your browser may be directly suppressing JavaScript functionality: certain browsers perform this suppression on local files (but not files delivered by web servers) for security reasons.

If you access the manual through the hub's Web GUI, the functionality will not be suppressed because the hub is a web server.
Alternatively, your browser may allow you to explicitly disable the security setting that suppresses functionality. See the CodeSonar FAQ for more information.

CodeSonar^® 9.0p0 Hot Tips

CONFIDENTIAL

CodeSecure Inc

JAVA.IO.HWID : Use of Hardware ID (Java)

Summary

A hardware identifier is used.

This includes the following cases.

A field annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareId is used.
A method that has a parameter annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareIdIfEqualsTo is invoked with the same value for that parameter as the one specified inside the annotation.
A method annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareId is invoked.

CodeSonar automatically applies this annotation to many standard Android methods. To specify additional methods to be treated as yielding a hardware identifier, apply this annotation directly.

Warnings of this class are not issued inside exception handlers that catch a GooglePlayServicesNotAvailableException, since a device identifier could be needed to handle this exception (e.g., to give feedback to the developer).

Properties

Class Name

Use of Hardware ID (Java)

Significance

security

Mnemonic

JAVA.IO.HWID

Example

// HardwareIDs.java
package com.juliasoft.julia.tests.checks.unsafeConnection;

import com.google.android.gms.common.GooglePlayServicesNotAvailableException;

import android.os.Build;
import android.telephony.TelephonyManager;
import android.provider.Settings;

public class HardwareIDs {
  public void hardwareIds() {
        System.out.println(Build.SERIAL);                // Use of Hardware ID (Java) warning issued here 
        TelephonyManager.getDefault().getDeviceId();     // Use of Hardware ID (Java) warning issued here 
        Settings.Secure.getString(null, "ANDROID_ID");   // Use of Hardware ID (Java) warning issued here 
  }
    
  public void problemsInsideExceptionHandler() {
        try {
            TelephonyManager.getDefault().getDeviceId(); // Use of Hardware ID (Java) warning issued here 
     
        } catch (GooglePlayServicesNotAvailableException e) {
            TelephonyManager.getDefault().getDeviceId(); 
        }
  }
}

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.