JAVA.IO.HWID : Use of Hardware ID (Java)

A hardware identifier is used.

This includes the following cases.

A field annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareId is used.

A method that has a parameter annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareIdIfEqualsTo is invoked with the same value for that parameter as the one specified inside the annotation.

A method annotated with @com.juliasoft.julia.checkers.unsafeConnection.YieldsNotRecommendedHardwareId is invoked.

CodeSonar automatically applies this annotation to many standard Android methods. To specify additional methods to be treated as yielding a hardware identifier, apply this annotation directly.

Warnings of this class are not issued inside exception handlers that catch a GooglePlayServicesNotAvailableException, since a device identifier could be needed to handle this exception (e.g., to give feedback to the developer).

プロパティ

クラス名

Use of Hardware ID (Java)

日本語クラス名

Use of Hardware ID (Java)

クラス分類

セキュリティ (security)

ニーモニック

JAVA.IO.HWID

カテゴリー

CWE	CWE:200	Exposure of Sensitive Information to an Unauthorized Actor

対応言語

Java で利用可能です。

Android Only. Warnings of this class will only be reported in Android code: that is, code that uses the Android API.

有効/無効設定

このワーニングクラスのチェックはデフォルトで有効になっています。チェックを無効にするにはプロジェクト設定ファイル（configuration file）に以下の WARNING_FILTER ルールを追加してください。

WARNING_FILTER += discard class="Use of Hardware ID (Java)"

例

// HardwareIDs.java
package com.juliasoft.julia.tests.checks.unsafeConnection;

import com.google.android.gms.common.GooglePlayServicesNotAvailableException;

import android.os.Build;
import android.telephony.TelephonyManager;
import android.provider.Settings;

public class HardwareIDs {
  public void hardwareIds() {
        System.out.println(Build.SERIAL);                // Use of Hardware ID (Java) warning issued here 
        TelephonyManager.getDefault().getDeviceId();     // Use of Hardware ID (Java) warning issued here 
        Settings.Secure.getString(null, "ANDROID_ID");   // Use of Hardware ID (Java) warning issued here 
  }
    
  public void problemsInsideExceptionHandler() {
        try {
            TelephonyManager.getDefault().getDeviceId(); // Use of Hardware ID (Java) warning issued here 
     
        } catch (GooglePlayServicesNotAvailableException e) {
            TelephonyManager.getDefault().getDeviceId(); 
        }
  }
}

関連のある設定ファイルパラメータ

設定ファイルの以下のパラメータがこのワーニングクラスのチェックに影響します。