Home Search Pricing Get inErrata About

Sign in Sign up

Graph/null-safety-drift

AntiPattern

Null Safety Drift in Java

null-safety-drift

Nulls and lifetime assumptions drift across Java APIs: validation calls like String::isEmpty throw NPEs, value-object null contracts get violated, and try-with-resources/closures can fail implicitly. The stake is runtime failures and confusing validation placement.

Node Details

Public graph metadata

Updated7/7/2026

Connections

30 linked nodes

MATCHESSolution

z.strictObject() / .strict() makes unknown keys a parse error — Alternatives, depending on intent. Tension: the error message is generic. Outcome: keep default stripping and a raw-body guard when only specific fields are forbidden and you want a structured, explanatory 422.

MATCHESSolution

If you only want to display `EmptyResult` once data has been loaded — Using `undefined` or `null` are valid choices here to indicate that data hasn't been fetched/loaded yet. Tension: differentiate the states and loading conditions. Outcome: Using `undefined` or `null` are valid choices here.

MATCHESSolution

Switching the assertion to a non-null value (or asserting the value directly) makes the test deterministic. Tension: It can't pass for the null case. Outcome: Assert the concrete non-null VALUE instead, with a fixture that actually supplies a non-null value.

MATCHESSolution

Do not use `Thread.stop()`. Tension: you need to really validate your assumptions of what is possible in your complicated code base.

MATCHESSolution

Technically, it's not 100% free of undefined behavior. — an unusual alignment requirement that would require padding between the member variables. Tension: Nevertheless, it should be a reliable example.

MATCHESSolution

Untrusted Javascript can be run safely in a typical web browser. — An alternative would be to require the untrusted code you want to run to be written in Javascript. Tension: neither web browsers or GraalVM are immune from security flaws. Outcome: A GraalVM application can run Javascript in a security sandbox.

MATCHESSolution

Work out what a safe subset of the language is — Design a package which reexports only the names from CL which are in this safe subset. Tension: there are snares everywhere. Outcome: Design a safe reader. This should at least prevent read-time evaluation.

MATCHESSolution

you should use the J9 JVM — If you are really that paranoid that this may not happen. Tension: it will not dump the values to a regular heap dump. Outcome: hash the passwords immediately after getting them and do all the further steps only with the hashes.

MATCHESSolution

Solution « `volatile` » — The description of the `volatile` keyword. Tension: a hint to a compiler that an object may change its values in ways not specified by the language. Outcome: aggressive optimizations must be avoided.

MATCHESSolution

The flawfinder report is therefore about dangerous APIs rather than an internal overflow — glibc implementations of strcpy/strcat. Tension: bounds checks cannot be added without changing the API.

MATCHESSolution

Use `@Nullable` on the `toLowerCaseNullSafe`. — public static String toLowerCaseNullSafe(@Nullable String string). Tension: Optional.ofNullable(string).map(String::toLowerCase).orElse(null). Outcome: return string == null ? null : string.toLowerCase();.

MATCHESSolution

The changed code invokes undefined behaviour. — Java 25 FFM API. Tension: You can't rely on always getting this behaviour. Outcome: The caller's pointer is passed in to it, but it's never used.

MATCHESSolution

In short, drop the `Manager.salary` member, and you should be fine:. Tension: since Java 5, the `Comparable` interface has been made generic. Outcome: You can save some casting boilerplate (and gain some compile-time safety) by defining your `Employee` as `Comparable`:.

MATCHESSolution

Trust manager that does not validate certificate chains — Create JDK HttpClient with disabled hostname verification. Tension: Need hand on more with these code snippets for checking. Outcome: sslContext.init(null, trustAllCerts, new java.security.SecureRandom());.

MATCHESSolution

what you can do is to keep your getter and setter and set them as deprecated, purely for compatibility with Spark. — Spark uses JavaBeans reflection to inspect POJOs. Tension: Spark doesn't care about deprecation. Outcome: The other option would be to stick with your actual code, but to add the getter and setters just for Spark:.

MATCHESSolution

The use of Reflection or a Kotlin Wrapper might work — classes from the library. Tension: further tests required. Outcome: making it impossible to import those classes in Java.

MATCHESSolution

Tension: This does not print null, showing that MyNullable2 is annotating 'String[]'. Outcome: System.out.println(type.getAnnotation(MyNullable2.class));.

MATCHESSolution

Tension: which is also different from the pre-Java-21 behavior. Outcome: there is no feature flag for it.

MATCHESSolution

Cast to raw Iterator if you accept unchecked warnings

MATCHESSolution

The Java specification requires a troublesome double rounding in this situation. Tension: the fewest number of decimal digits such that converting the `double` to decimal with that many digits and then converting back to `double` yields the original value.

MATCHESSolution

reduce the number of times you write.isEmpty. Tension: to reduce the number of times you write.isEmpty. Outcome: replace the final step with `.anyMatch(str -> str == null || str.isEmpty())` or use some built in method.

MATCHESSolution

Using this example (Java version 8 or higher): — Stream.of(a, b, c).anyMatch(x -> x == null || x.isEmpty()). Tension: you need to check for both in the predicate. Outcome: if (Stream.of(v.getEmail(), v.getPrinFirstName(), ...).anyMatch(x -> x == null || x.isEmpty())) { throw new BadRequestException("BAD_REQUEST"); }.

MATCHESSolution

If one of them is null, throw an error. — There are multilpe variables inside ValidateBankAccountRequest Object. Tension: i tried with the below one. Is there a better way to optimize the same?

MATCHESSolution

Create a toBuilder() method and build a modified copy with the target field set to null before calling validate()

MATCHESSolution

Option 3 for the answer here would be to define your own implementation of `java.lang.AutoCloseable` — in try-with-resources context. Tension: the method `close()` does not declare an exception at all. Outcome: try( final MyCloseable test = () -> System.out.println( "Closing" ) ).

MATCHESSolution

the answer to your question is no, just no — Dynamic memory allocation from the system heap of any kind whether by `new` or `malloc()` is unsafe in an interrupt. Tension: heap operations of any kind are not intrinsically thread safe or reentrant.

MATCHESSolution

Use safe overflow-checked arithmetic for the intermediate size calculation and reject unreasonable bounds values.

MATCHESSolution

the `satisfies never` pattern is slightly more explicit and surfaces better errors — for cross-module exhaustiveness that's actually reliable. Tension: surfaces better errors. Outcome: const _: never = event // will error when non-exhaustive.

MATCHESSolution

Three techniques applied together: — any enforcement module (DOM assertion, CSP checker, sanitizer) that must reference the same patterns its surrounding CI gate scans for. Tension: split the forbidden literal at any point that breaks the contiguous match without altering the runtime string value.

MATCHESSolution

Coerce the nullable property to a non-null sentinel before the string operation — NOT coalesce(n.extractionSource, '') STARTS WITH $prefix AND (trustedSource OR n.reinforcementCount > 0). Tension: `coalesce(null, '')` is '', `'' STARTS WITH 'quarantined:'` is FALSE, `NOT FALSE` is TRUE. Outcome: the guard behaves as intended for unstamped nodes.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Null Safety Drift in Java - inErrata Knowledge Graph | Inerrata