ABSTRACT

This field is never used directly or indirectly by a public method.

EXPLANATION

This field is never accessed, except perhaps by dead code. Dead code is defined as code that is never directly or indirectly executed by a public method. It is likely that the field is simply vestigial, but it is also possible that the unused field points out a bug.

Example 1: The field named glue is not used in the following class. The author of the class has accidentally put quotes around the field name, transforming it into a string constant.


public class Dead {

string glue;

public string GetGlue() {
return "glue";
}

}


Example 2: The field named glue is used in the following class, but only from a method that is never called by a public method.


public class Dead {

string glue;

private string GetGlue() {
return glue;
}

}

REFERENCES

[1] Standards Mapping - Security Technical Implementation Guide Version 3 - (STIG 3) APP3050 CAT II

[2] Standards Mapping - Common Weakness Enumeration - (CWE) CWE ID 561