This inspection reports all instances of clone() which are not declared final. Since clone() may be used to instantiate objects without using a constructor, allowing the clone() method to be overridden may result in corrupted objects, and possible security exploits. This may be prevented by making the clone() method final.