[Demonstration 1]

[Buggy Method]
@RequestMapping(value = "/bananas", method = RequestMethod.POST)
@ResponseBody
public Object addBanana(@RequestParam("video") CommonsMultipartFile video, @RequestParam("image") CommonsMultipartFile image, @RequestParam("json") String json, HttpServletResponse response) {
    ResCommon t = null;
    String token = this.getToken();
    if (checkToken()) {
        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        return null;
    }
    String vidoname = video.getOriginalFilename();
    String imgname = image.getOriginalFilename();
    if (!FileUtil.checkFileType(vidoname, Const.vidoType) || !FileUtil.checkFileType(imgname, Const.imageType)) {
        response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
        return null;
    }
    long l = new Date().getTime();
    String videoname = l + vidoname;
    String imagename = l + imgname;
    String Imagepath = Const.Imagepath + imagename;
    String Videopath = Const.Videopath + videoname;
    String v = "video/" + videoname;
    String i = "image/" + imagename;
    ObjectMapper mapper = new ObjectMapper();
    File newVideo = new File(Videopath);
    File newImage = new File(Imagepath);
    // 通过CommonsMultipartFile的方法直接写文件（注意这个时候）
    try {
        video.transferTo(newVideo);
        image.transferTo(newImage);
        AddBananaAction addBananaAction = mapper.readValue(json, AddBananaAction.class);
        // System.out.println("test key word: " +
        // addBananaAction.getBanana().getBubble().getKey_word());
        t = appuserService.saveBanana(addBananaAction.getBanana(), token, i, v);
    } catch (Exception e) {
        // TODO: handle exception
        e.printStackTrace();
    }
    return t;
}

[Buggy Hunk]
AddBananaAction addBananaAction = mapper.readValue(json, AddBananaAction.class);

[Patch]
AddBananaRequest addBananaAction = mapper.readValue(json, AddBananaRequest.class);

[Demonstration 2]

[Buggy Method]
@Override
public Vehicle getVehicle(String carLicencePlate) {
    ObjectMapper mapper = new ObjectMapper();
    try {
        Vehicle[] vehicles = new Vehicle[10];
        vehicles = mapper.readValue(new File(VEHICLES_DATABASE_PATH), Vehicle[].class);
        return checkVehicleList(vehicles, carLicencePlate);
    } catch (JsonGenerationException e) {
        e.printStackTrace();
    } catch (JsonMappingException e) {
        e.printStackTrace();
    } catch (IOException e) {
        e.printStackTrace();
    }
    return null;
}

[Buggy Hunk]
vehicles = mapper.readValue(new File(VEHICLES_DATABASE_PATH), Vehicle[].class);

[Patch]
vehicles = mapper.readValue(new File(utils.VEHICLES_DATABASE_PATH), Vehicle[].class);

[Demonstration 3]

[Buggy Method]
public static Result service(String ownerName, String projectName, String service, boolean isAdvertise) throws IOException, UnsupportedOperationException, ServletException {
    if (!isSupportedService(service)) {
        return forbidden(String.format("Unsupported service: '%s'", service));
    }
    Project project = Project.findByOwnerAndProjectName(ownerName, projectName);
    if (project == null) {
        return notFound();
    }
    models.User user = UserApp.currentUser();
    if (!isAllowed(project, service)) {
        if (user.isAnonymous()) {
            return BasicAuthAction.unauthorized(response());
        } else {
            // If you want the Git client showing your custom message to
            // the user, the Content-Type should be exact "text/plain"
            // without any parameter. For more details, see the code at
            // https://github.com/git/git/commit/426e70d4a11ce3b4f70636d57c6a0ab16ae08a00#diff-eea0ad565ec5903a11b6023755d491cfR154
            response().setHeader("Content-Type", "text/plain");
            return forbidden(String.format("'%s' has no permission to '%s/%s'.", user.name, ownerName, projectName));
        }
    }
    if (isAdvertise) {
        return ok(RepositoryService.gitAdvertise(project, service, response()));
    } else {
        if (request().body().isMaxSizeExceeded()) {
            return status(REQUEST_ENTITY_TOO_LARGE);
        } else {
            user.visits(project);
            return ok(RepositoryService.gitRpc(project, service, request(), response()));
        }
    }
}

[Buggy Hunk]
user.name, ownerName, projectName));

[Patch]
user.loginId, ownerName, projectName));