hi

problem1:
below is a java file that i have and after applying a security check
on the return reference,
i have this security risk involved :"The method returns the reference
Object type directly."
the suggested solution was to "Return a copy of the reference Object."
Can any one help me to see what i can do to remove this secutiry risk?

public class InventoryList{
    public static InventoryList merge(InventoryList a, InventoryList b){
        if (a == null){
            return b;}
        else if (b == null){
            return a;
        }
        else {

            InventoryList c = new InventoryList();
            c.count = a.count + b.count;
            c.head = a.head;
            c.tail = b.tail;
            a.tail.next = b.head;
            return c;
        }
    }

}

problem 2:
i've been told to do work on the security check for "buffers
overflow". the only example i was given is below

int data[] = new data[10];
data[10] = 100;

can anyone explain to me how this checking of buffers overflow works
and perhaps and example to how it can be solved?

will really appreciate any help i can get :)