CodeQL documentation
CodeQL resources

Contradictory type checks

ID: java/contradictory-type-checks
Kind: problem
Security severity: 
Severity: error
Precision: very-high
Tags:
   - correctness
   - logic
Query suites:
   - java-security-and-quality.qls

Click to see the query in the CodeQL repository

If an instanceof expression occurs in a position where the type test is guaranteed to return false, this is often due to a typo or logical mistake. It also suggests that the surrounding code is not well tested, or possibly even dead.

Similarly, a cast that is guaranteed to fail usually indicates badly tested or dead code.

Recommendation

Inspect the surrounding code for logical errors.

Example

In the following example, method getKind first checks whether its argument x is an instance of class Mammal, and then whether it is an instance of class Tiger.

String getKind(Animal a) {
	if (a instanceof Mammal) {
		return "Mammal";
	} else if (a instanceof Tiger) {
		return "Tiger!";
	} else {
		return "unknown";
	}
}

If Tiger is a subclass of Mammal, then the second instanceof check can never evaluate to true. Clearly, the two conditions should be swapped:

String getKind(Animal a) {
	if (a instanceof Tiger) {
		return "Tiger!";
	} else if (a instanceof Mammal) {
		return "Mammal";
	} else {
		return "unknown";
	}
}

References

  • © GitHub, Inc.
  • Terms
  • Privacy