[Demonstration 1]

[Buggy Method]
@ApiOperation(value = "get all 3D hotspot mutations", nickname = "fetch3dHotspotMutationsPOST")
@RequestMapping(value = "/hotspots/3d", method = { RequestMethod.POST }, produces = "application/json")
public List<HotspotMutation> fetch3dHotspotMutationsPOST(@ApiParam(value = "Comma separated list of hugo symbols. For example PTEN,BRAF,TP53", required = false, allowMultiple = true) @RequestParam(required = false) List<String> hugoSymbols) {
    if (hugoSymbols == null || hugoSymbols.size() == 0) {
        return multiResidueHotspotMutationService.getAllHotspotMutations();
    } else {
        return fetch3dHotspotMutationsByGeneGET(hugoSymbols);
    }
}

[Buggy Hunk]
method = {RequestMethod.POST},

[Patch]
method = {RequestMethod.POST, RequestMethod.GET},

[Demonstration 2]

[Buggy Method]
@PreAuthorize("hasAuthority('teacher')")
@RequestMapping(value = "{userId}/{courseId}/{levelId}/{goalId}/{skillId}", method = RequestMethod.POST)
public String confirmCourseSkillAsTeacher(@PathVariable Long userId, @PathVariable Long courseId, @PathVariable Long levelId, @PathVariable Long goalId, @PathVariable Long skillId) {
    Course course = courseService.getCourseById(courseId);
    GradeLevel gradeLevel = gradeLevelService.findGradeLevelById(levelId);
    Goal goal = goalService.findGoalById(goalId);
    Skill skill = skillService.findSkill(skillId);
    CourseProgressTracker tracker = progressService.getProgress(userService.findById(userId), course);
    progressService.swapSkillStatusAsTeacher(tracker, gradeLevel, goal, skill);
    return "redirect:/course" + "/" + courseId + "/" + userId;
}

[Buggy Hunk]
return "redirect:/course" + "/" + courseId + "/" + userId;

[Patch]
return "redirect:/course/" + courseId + "/" + userId;

[Demonstration 3]

[Buggy Method]
public static Result service(String ownerName, String projectName, String service, boolean isAdvertise) throws IOException, UnsupportedOperationException, ServletException {
    if (!isSupportedService(service)) {
        return forbidden(String.format("Unsupported service: '%s'", service));
    }
    Project project = Project.findByOwnerAndProjectName(ownerName, projectName);
    if (project == null) {
        return notFound();
    }
    models.User user = UserApp.currentUser();
    if (!isAllowed(project, service)) {
        if (user.isAnonymous()) {
            return BasicAuthAction.unauthorized(response());
        } else {
            // If you want the Git client showing your custom message to
            // the user, the Content-Type should be exact "text/plain"
            // without any parameter. For more details, see the code at
            // https://github.com/git/git/commit/426e70d4a11ce3b4f70636d57c6a0ab16ae08a00#diff-eea0ad565ec5903a11b6023755d491cfR154
            response().setHeader("Content-Type", "text/plain");
            return forbidden(String.format("'%s' has no permission to '%s/%s'.", user.name, ownerName, projectName));
        }
    }
    if (isAdvertise) {
        return ok(RepositoryService.gitAdvertise(project, service, response()));
    } else {
        if (request().body().isMaxSizeExceeded()) {
            return status(REQUEST_ENTITY_TOO_LARGE);
        } else {
            user.visits(project);
            return ok(RepositoryService.gitRpc(project, service, request(), response()));
        }
    }
}

[Buggy Hunk]
user.name, ownerName, projectName));

[Patch]
user.loginId, ownerName, projectName));