Fortify无法识别lambda

Question

Dead Code: Unused Method

Fortify is detecting lambda methods as unused. For instance: I have the below method: getCountryCode , even though its used in many places, fortify is reporting it as an unused method.

private List<String> getCountryCodeAsList(Map<Long, String> countryData, List<String> nationalityRestriction) {
    return nationalityRestriction.parallelStream().filter(r -> !org.apache.commons.lang3.StringUtils.isBlank(r))
            .map(r -> getCountryCode(countryData, r)).collect(Collectors.toList());
}

private String getCountryCode(Map<Long, String> countryData, String r) {
    return !org.apache.commons.lang3.StringUtils.isBlank(r) ? countryData.get(Long.parseLong(r)): null;
}

How to fix this issue? Any pointers?

Answer 1

Currently Fortify SCA only supports lambdas in a subset of the languages it can scan that use lambda expressions. Fortify SCA implemented a new built-in analyzer that they call the Higher Order analyzer to accomplish this, but it will only work with the following languages: JavaScript, Python, Ruby, and Swift.

So the short answer to your question is that you can't really do anything until Fortify implements support for Java lambda expressions in their Higher Order analyzer.