some security issues...

hi

problem1:
below is a java file that i have and after applying a security check
on the return reference,
i have this security risk involved :"The method returns the reference
Object type directly."
the suggested solution was to "Return a copy of the reference Object."
Can any one help me to see what i can do to remove this secutiry risk?

public class InventoryList{
public static InventoryList merge(InventoryList a, InventoryList b){
if (a == null){
return b;}
else if (b == null){
return a;
}
else {

InventoryList c = new InventoryList();
c.count = a.count + b.count;
c.head = a.head;
c.tail = b.tail;
a.tail.next = b.head;
return c;
}
}

}

problem 2:
i've been told to do work on the security check for "buffers
overflow". the only example i was given is below

int data[] = new data[10];
data[10] = 100;

can anyone explain to me how this checking of buffers overflow works
and perhaps and example to how it can be solved?

will really appreciate any help i can get :)

.

Relevant Pages

  • Re: Deploying multiple EXEs using the basic publish mechanism of
    ... I unchecked Enable clickonce security in all the projects that I wanted to reference in the man project. ... when I did attempt to publish a referenced project publishing turned the Enable click once security option back on! ... Reference APP 2 in APP1 via the project tab, ...
    (microsoft.public.dotnet.general)
  • Re: I DO NOT BELIEVE THE AROGANCE.
    ... hour of exchanging yes no answers with him; he was not CIA officer, ... control off all security lines. ... and supply their response. ... Question Reference #080310-000086 ...
    (soc.culture.europe)
  • XP & Vista ADOX Library
    ... XP require "ADO Ext. 2.8 for DLL and Security". ... 'Load a reference to the ADO Ext. 2.8 for DLL and Security ...
    (microsoft.public.access.formscoding)
  • [UNIX] Bugzilla Multiple Vulnerabilities (SQL Injections, Privileges Escalation, Information Leak)
    ... Get your security news from a reliable source. ... user may retain privileges that should have been removed, ... Reference: ... secure bug, you can access the summary of that bug even if you do not have ...
    (Securiteam)
  • Re: References and Security
    ... programmatically manipulate database structure or security. ... > Our database will not retain a reference of Microsoft ADOext.2.7 for DLL ... > problems for users with different versions of Windows. ...
    (microsoft.public.access.security)