Project Name | Apache Tomcat |
---|---|
Lines of code analyzed | 254,848 |
On Coverity Scan since | Aug 13, 2014 |
Last build analyzed | 14 days ago |
Language | Java |
Repository URL | https://github.com/apache/tomcat.git |
Homepage URL | http://tomcat.apache.org/ |
License | N/A |
Want to view defects or help fix defects?
Add me to projectAlong with Coverity defects found by Coverity analysis, you may include or exclude Findbugs defects in analysis results.
You may disable or enable Findbugs defects via the Edit function in project settings. Changes will be reflected upon subsequent build submissions.
Excluding or including these defects will change the total number of defects significantly.
Version: 12-36c226f
Note: Defect density is measured by the number of defects per 1,000 lines of code.
Component Name | Pattern | Ignore | Line of Code | Defect density |
---|---|---|---|---|
WebSocket | .*/org/apache/tomcat/websocket/.* | No | 8,466 | 0.00 |
Jasper | .*/org/apache/jasper/.* | No | 25,980 | 0.04 |
Catalina | .*/org/apache/catalina/.* | No | 100,370 | 0.25 |
Coyote | .*/org/apache/coyote/.* | No | 15,588 | 0.38 |
EL | .*/org/apache/el/.* | No | 11,665 | 0.00 |
JULI | .*/org/apache/juli/.* | No | 1,513 | 0.00 |
DBCP fork | .*/org/apache/tomcat/dbcp/.* | No | 19,675 | 0.61 |
Tomcat JDBC | .*/jdbc-pool/.* | No | 0 | N/A |
Web apps | .*/webapps/.* | No | 0 | N/A |
Jakarta APIS | .*/jakarta/.* | No | 10,180 | 0.00 |
Fileupload | .*/org/apache/tomcat/util/http/fileupload/.* | No | 2,550 | 0.78 |
Naming | .*/org/apache/naming/.* | No | 2,196 | 3.64 |
Other | .* | No | 45,118 | 0.07 |
ID | CWE-Name | Number of Defects |
---|---|---|
22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 8 |
79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 31 |
327 | Use of a Broken or Risky Cryptographic Algorithm | 2 |
798 | Use of Hard-coded Credentials | 11 |
Coverity Scan tests every line of code and potential execution path. The root cause of each defect is clearly explained, making it easy to fix bugs.
Would you like to view the project defects, or help improve its quality by fixing defects?
Add me to project