[ARIES-481] BlueprintEvent may mutate after creation

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.2
• Fix Version/s: 0.3, blueprint-0.2.1
• Component/s: Blueprint
• Assignee: Alasdair Nottingham
• Reporter: Alasdair Nottingham
• Created: 04/Nov/10 23:22
• Updated: 17/Feb/11 17:43
• Resolved: 04/Nov/10 23:38

Description

Running findbugs on the org.osgi.service.blueprint package results in the
following error:

org.osgi.service.blueprint.container.BlueprintEvent(int, Bundle, Bundle,
String[], Throwable) may expose internal representation by storing an
externally mutable object into BlueprintEvent.dependencies MALICIOUS_CODE
EI_EXPOSE_REP2 229 Medium

I think the worst that can happen is that if the BlueprintContainer
implementation changed the dependencies array it passes to the extender two
different event handlers could see different dependencies.