Nabble - FindBugs - General

using find bugs with Eclipse J2EE projects

2009-11-22T12:09:45Z

I'm quite happily using find bugs with Eclipse and conventional Java. So I thought I would try find bugs with a J2EE project I've working on, however when I right click on the source code an invike find bugs from the floating menu that appears, I get Java project does not exist or is not open: P/MyProject. It has ocurred to me that:-

1) I need to create an explicit ant build.xml and add a task for findbugs and build the project from ant on the command line.

2) Customise the build xml file that Eclipse uses

3) What I trying to do despite working quite happily with the normal Java 1.5 JDK and Eclipse cannot be done with J2EE projects.

Can someone please help me out here.

cant see row numbers in findbugs report

2009-10-23T02:19:24Z

hey folks,

i am using findbugs and hudson with hudson findbugs plugin. my problem is that i cant see the row number in the findbugs report. i can see the errors, warnings etc but not the row number where i can find the error, warning ... i am using findbugs on a jar file that i build in the following way:

<target name="BuildJar">
<jar destfile="${jarFile}"
basedir="${build}"
excludes="**/test.class"/>

the thing that makes me wonder is that when i use findbugs on another jar that i didnt build on my own (in my case it was bcel.jar from apache) i can see the line numbers.... ?????

can anybody help me?

thx in advance!!!!

Re: [FB-Discuss] Finbugs Maven Plugin error

2009-04-27T21:36:04Z

Yes Garvin. That’s a stupid mistake from my end. I should have read the page properly once before posting the question.

Thanks for your update, everything works fine now.

~Muthu

From: Garvin LeClaire [mailto:garvin.leclaire@...]
Sent: Monday, April 27, 2009 4:44 AM
To: Muthu Velappan
Cc: findbugs-discuss@...
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

It looks like you are trying to load the xdoc version of the bug report.    Try setting your configuration like:

<project>
...
<reporting>
    <plugins>
      <plugin>
        <groupId>org.codehaus.mojo</groupId>
        <artifactId>findbugs-maven-plugin</artifactId>
        <version>2.0.1</version>
        <configuration>
          <findbugsXmlOutput>true</findbugsXmlOutput>
          
          <findbugsXmlOutputDirectory>target/site</findbugsXmlOutputDirectory>
        </configuration>
      </plugin>
    </plugins>
</reporting>
...
</project>

More info at http://mojo.codehaus.org/findbugs-maven-plugin/usage.html

Regards,

Garvin LeClaire

garvin.leclaire@...

Muthu Velappan wrote:

Garvin,

No, I have findbugs application installed in my system. I launching the GUI from there and loading the generated XML through FileàOpen Menu.

Regards,

Muthu

From: Garvin LeClaire [mailto:garvin.leclaire@...]
Sent: Thursday, April 23, 2009 4:33 PM
To: Muthu Velappan
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

Are you running "mvn findbugs:gui"?

Regards,

Garvin LeClaire

garvin.leclaire@...

Muthu Velappan wrote:

Thanks Garvin. Proxy is the issue, It is resolved now and report generation is working fine…

However, now I’m running into another issue. The generated findbugs XML is not getting loaded into Findbugs Swing UI. It’s not a show stopper for me but I would like to know from the group whether this is a known issue for finbugs reports generated through Maven reporting configuration…

Part of my Output XML, This is not getting loaded into Swing UI..

<?xml version="1.0" encoding="UTF-8"?>

</file>

</file>

</Errors>

<SrcDir>E:\Muthu\Projects\sample\test\src\main\java</SrcDir>

</Project>

</BugCollection>

~Muthu

From: Garvin LeClaire [garvin.leclaire@...]
Sent: Friday, April 17, 2009 10:47 PM
To: muthu velappan
Cc: findbugs-discuss@...
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

I am able to see the repository items for the plugin. Are you behind a firewall?

Put the following in your browser :

http://repo1.maven.org/maven2/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

If that works, look at your settings.xml and configure a proxy if your browser is using one.

Regards,

Garvin LeClaire

garvin.leclaire@...

muthu velappan wrote:

Hi,

I tried to setup maven findbugs plug-in for my project but it shows the error trace copied below… I also attached my settings.xml file and findbugs reporting configuration in my pom.xml.

Please let me know where I’m going wrong.

Thanks,

Muthu

Reporting configuration in pom.xml

<groupId>org.codehaus.mojo</groupId>

<artifactId>findbugs-maven-plugin</artifactId>

<xmlOutputDirectory>e:\muthu\Projects</xmlOutputDirectory>

<threshold>Medium</threshold>

</configuration>

</plugin>

</plugins>

</reporting>

Error Trace

url = http://repository.codehaus.org

Downloading: http://repository.codehaus.org/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://maven.restlet.org/

Downloading: http://maven.restlet.org//org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://repo1.maven.org/maven2

Downloading: http://repo1.maven.org/maven2/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

[ERROR]

Maven encountered an error while loading a plugin for use in your build.

Plugin:

Group-Id: org.codehaus.mojo

Artifact-Id: findbugs-maven-plugin

Version: 2.0

Referenced mojo: findbugs

brought in via: null

While building project:

Group-Id: com.thinkronize.edudym

Artifact-Id: EduDymServices

Version: 1.0.0-SNAPSHOT

From file: E:\Muthu\Projects\Antares\EduDymServices\pom.xml

Error message:Failed to load plugin. Reason: Unable to build project for plugin 'org.codehaus.mojo:findbugs-maven-plugin': POM 'org.codehaus.mojo:findbugs-maven-plugin' not found in repository: Unable to download the artifact from any repository

org.codehaus.mojo:findbugs-maven-plugin:pom:2.0

from the specified remote repositories:

findbugs (http://repository.codehaus.org),

maven-restlet (http://maven.restlet.org/),

central (http://repo1.maven.org/maven2)

for project org.codehaus.mojo:findbugs-maven-plugin

Root error message:Unable to download the artifact from any repository

[INFO] ------------------------------------------------------------------------

[INFO] For more information, run with the -e flag

[INFO] ------------------------------------------------------------------------

[INFO] BUILD FAILED

[INFO] ------------------------------------------------------------------------

[INFO] Total time: 4 seconds

[INFO] Finished at: Thu Apr 16 14:00:30 IST 2009

[INFO] Final Memory: 1M/4M

[INFO] ------------------------------------------------------------------------

_______________________________________________

Findbugs-discuss mailing list

Findbugs-discuss@...

https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: [FB-Discuss] searching this mailing list

2009-04-24T21:13:39Z

Try this link in nabble archives to search on entire content..

http://www.nabble.com/FindBugs-f2570.html

Regards,
Muthu

-----Original Message-----
From: findbugs-discuss-bounces@...
[mailto:findbugs-discuss-bounces@...] On Behalf Of Brent
Sent: Friday, April 24, 2009 10:24 PM
To: findbugs-discuss@...
Subject: [FB-Discuss] searching this mailing list

The historical collection of this mailing list
https://mailman.cs.umd.edu/pipermail/findbugs-discuss/
seems to be strictly divided into monthly views.

In other words, to search it for a given topic, I would need to click on
each month and search it individually, which is brutally inefficient.

Does anyone know how the full archives can be searched in one fell swoop?

Thanks,

Sam

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: [FB-Discuss] Finbugs Maven Plugin error

2009-04-23T21:50:32Z

Garvin,

No, I have findbugs application installed in my system. I launching the GUI from there and loading the generated XML through FileàOpen Menu.

Regards,

Muthu

From: Garvin LeClaire [mailto:garvin.leclaire@...]
Sent: Thursday, April 23, 2009 4:33 PM
To: Muthu Velappan
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

Are you running "mvn findbugs:gui"?

Regards,

Garvin LeClaire

garvin.leclaire@...

Muthu Velappan wrote:

Thanks Garvin. Proxy is the issue, It is resolved now and report generation is working fine…

Part of my Output XML, This is not getting loaded into Swing UI..

<?xml version="1.0" encoding="UTF-8"?>

</file>

</file>

</Errors>

<SrcDir>E:\Muthu\Projects\sample\test\src\main\java</SrcDir>

</Project>

</BugCollection>

~Muthu

From: Garvin LeClaire [garvin.leclaire@...]
Sent: Friday, April 17, 2009 10:47 PM
To: muthu velappan
Cc: findbugs-discuss@...
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

Regards,

Garvin LeClaire

garvin.leclaire@...

muthu velappan wrote:

Hi,

I tried to setup maven findbugs plug-in for my project but it shows the error trace copied below… I also attached my settings.xml file and findbugs reporting configuration in my pom.xml.

Please let me know where I’m going wrong.

Thanks,

Muthu

Reporting configuration in pom.xml

<groupId>org.codehaus.mojo</groupId>

<artifactId>findbugs-maven-plugin</artifactId>

<xmlOutputDirectory>e:\muthu\Projects</xmlOutputDirectory>

<threshold>Medium</threshold>

</configuration>

</plugin>

</plugins>

</reporting>

Error Trace

url = http://repository.codehaus.org

Downloading: http://repository.codehaus.org/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://maven.restlet.org/

Downloading: http://maven.restlet.org//org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://repo1.maven.org/maven2

Downloading: http://repo1.maven.org/maven2/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

[ERROR]

Maven encountered an error while loading a plugin for use in your build.

Plugin:

Group-Id: org.codehaus.mojo

Artifact-Id: findbugs-maven-plugin

Version: 2.0

Referenced mojo: findbugs

brought in via: null

While building project:

Group-Id: com.thinkronize.edudym

Artifact-Id: EduDymServices

Version: 1.0.0-SNAPSHOT

From file: E:\Muthu\Projects\Antares\EduDymServices\pom.xml

org.codehaus.mojo:findbugs-maven-plugin:pom:2.0

from the specified remote repositories:

findbugs (http://repository.codehaus.org),

maven-restlet (http://maven.restlet.org/),

central (http://repo1.maven.org/maven2)

for project org.codehaus.mojo:findbugs-maven-plugin

Root error message:Unable to download the artifact from any repository

[INFO] ------------------------------------------------------------------------

[INFO] For more information, run with the -e flag

[INFO] ------------------------------------------------------------------------

[INFO] BUILD FAILED

[INFO] ------------------------------------------------------------------------

[INFO] Total time: 4 seconds

[INFO] Finished at: Thu Apr 16 14:00:30 IST 2009

[INFO] Final Memory: 1M/4M

[INFO] ------------------------------------------------------------------------

_______________________________________________

Findbugs-discuss mailing list

Findbugs-discuss@...

https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: [FB-Discuss] Finbugs Maven Plugin error

2009-04-21T02:39:47Z

Thanks Garvin. Proxy is the issue, It is resolved now and report generation is working fine…

Part of my Output XML, This is not getting loaded into Swing UI..

<?xml version="1.0" encoding="UTF-8"?>

</file>

</file>

</Errors>

<SrcDir>E:\Muthu\Projects\sample\test\src\main\java</SrcDir>

</Project>

</BugCollection>

~Muthu

From: Garvin LeClaire [mailto:garvin.leclaire@...]
Sent: Friday, April 17, 2009 10:47 PM
To: muthu velappan
Cc: findbugs-discuss@...
Subject: Re: [FB-Discuss] Finbugs Maven Plugin error

Regards,

Garvin LeClaire

garvin.leclaire@...

muthu velappan wrote:

Hi,

I tried to setup maven findbugs plug-in for my project but it shows the error trace copied below… I also attached my settings.xml file and findbugs reporting configuration in my pom.xml.

Please let me know where I’m going wrong.

Thanks,

Muthu

Reporting configuration in pom.xml

<groupId>org.codehaus.mojo</groupId>

<artifactId>findbugs-maven-plugin</artifactId>

<xmlOutputDirectory>e:\muthu\Projects</xmlOutputDirectory>

<threshold>Medium</threshold>

</configuration>

</plugin>

</plugins>

</reporting>

Error Trace

url = http://repository.codehaus.org

Downloading: http://repository.codehaus.org/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://maven.restlet.org/

Downloading: http://maven.restlet.org//org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://repo1.maven.org/maven2

Downloading: http://repo1.maven.org/maven2/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

[ERROR]

Maven encountered an error while loading a plugin for use in your build.

Plugin:

Group-Id: org.codehaus.mojo

Artifact-Id: findbugs-maven-plugin

Version: 2.0

Referenced mojo: findbugs

brought in via: null

While building project:

Group-Id: com.thinkronize.edudym

Artifact-Id: EduDymServices

Version: 1.0.0-SNAPSHOT

From file: E:\Muthu\Projects\Antares\EduDymServices\pom.xml

org.codehaus.mojo:findbugs-maven-plugin:pom:2.0

from the specified remote repositories:

findbugs (http://repository.codehaus.org),

maven-restlet (http://maven.restlet.org/),

central (http://repo1.maven.org/maven2)

for project org.codehaus.mojo:findbugs-maven-plugin

Root error message:Unable to download the artifact from any repository

[INFO] ------------------------------------------------------------------------

[INFO] For more information, run with the -e flag

[INFO] ------------------------------------------------------------------------

[INFO] BUILD FAILED

[INFO] ------------------------------------------------------------------------

[INFO] Total time: 4 seconds

[INFO] Finished at: Thu Apr 16 14:00:30 IST 2009

[INFO] Final Memory: 1M/4M

[INFO] ------------------------------------------------------------------------

_______________________________________________

Findbugs-discuss mailing list

Findbugs-discuss@...

https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

[FB-Discuss] Finbugs Maven Plugin error

2009-04-16T01:38:43Z

Hi,

I tried to setup maven findbugs plug-in for my project but it shows the error trace copied below… I also attached my settings.xml file and findbugs reporting configuration in my pom.xml.

Please let me know where I’m going wrong.

Thanks,

Muthu

Reporting configuration in pom.xml

<groupId>org.codehaus.mojo</groupId>

<artifactId>findbugs-maven-plugin</artifactId>

<xmlOutputDirectory>e:\muthu\Projects</xmlOutputDirectory>

<threshold>Medium</threshold>

</configuration>

</plugin>

</plugins>

</reporting>

Error Trace

url = http://repository.codehaus.org

Downloading: http://repository.codehaus.org/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://maven.restlet.org/

Downloading: http://maven.restlet.org//org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

url = http://repo1.maven.org/maven2

Downloading: http://repo1.maven.org/maven2/org/codehaus/mojo/findbugs-maven-plugin/2.0/findbugs-maven-plugin-2.0.pom

[ERROR]

Maven encountered an error while loading a plugin for use in your build.

Plugin:

Group-Id: org.codehaus.mojo

Artifact-Id: findbugs-maven-plugin

Version: 2.0

Referenced mojo: findbugs

brought in via: null

While building project:

Group-Id: com.thinkronize.edudym

Artifact-Id: EduDymServices

Version: 1.0.0-SNAPSHOT

From file: E:\Muthu\Projects\Antares\EduDymServices\pom.xml

org.codehaus.mojo:findbugs-maven-plugin:pom:2.0

from the specified remote repositories:

findbugs (http://repository.codehaus.org),

maven-restlet (http://maven.restlet.org/),

central (http://repo1.maven.org/maven2)

for project org.codehaus.mojo:findbugs-maven-plugin

Root error message:Unable to download the artifact from any repository

[INFO] ------------------------------------------------------------------------

[INFO] For more information, run with the -e flag

[INFO] ------------------------------------------------------------------------

[INFO] BUILD FAILED

[INFO] ------------------------------------------------------------------------

[INFO] Total time: 4 seconds

[INFO] Finished at: Thu Apr 16 14:00:30 IST 2009

[INFO] Final Memory: 1M/4M

[INFO] ------------------------------------------------------------------------

<settings xmlns="http://maven.apache.org/settings/1.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/setrings/1.0.0
http://maven.apache.org/xsd/settings-1.0.0.xsd">

<servers>
<server>
<id>findbugs</id>
</server>
</servers>

<profiles>

<profile>
<id>findbugs-profile</id>
<repositories>
<repository>
<id>findbugs</id>
<url>http://repository.codehaus.org</url>
</repository>
</repositories>
</profile>

</profiles>

<activeProfiles>
<activeProfile>findbugs-profile</activeProfile>
</activeProfiles>

</settings>

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Using Multiple Exclude Files

2009-03-12T04:21:27Z

Is it possible to use multiple exclude files from the ant task?

We have a component based architecture where would like to have a standard set of exclusions which are added to on a component by component basis.

Thanks in advance.

Paul

Re: Annotations

2009-03-09T06:59:07Z

Yes, that may be working, but then You have to add a findbugs.jar to classpath, which is not what everybody would love to do :)
I've submitted a enhancement to https://sourceforge.net/tracker/index.php?func=detail&aid=2675225&group_id=96405&atid=614696
maybe someday.. ;)

Brian Cole-2 wrote:

Well the SuppressWarnings annotation is part of J2SE 1.5
<http://java.sun.com/j2se/1.5/docs/api/java/lang/SuppressWarnings.html>

The problem is that java.lang.SuppressWarnings has @Retention
(value=SOURCE),
which means it doesn't make it into the class file. Hence FindBugs
can't see it.

FindBugs defines edu.umd.cs.findbugs.annotations.SuppressWarnings
which works the same way but has @Retention(RetentionPolicy.CLASS).
FindBugs will honor this annotation, and will also honor any annotiation
named SuppressWarnings (with class retention) in any other package .

This does need be documented in the manual.

-brian

On Jan 28, 2006, at 11:51 AM, Michael Gerz wrote:
> Hello,
>
> there are rumours that findbugs allows using annotations for
> suppressing
> warnings and other things. (I saw some comments in the Changelog)
>
> Where is this feature described? I can't find it in the manual.
>
> Regards,
>
> Michael

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@mimsy.cs.umd.edu
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: [FB-Discuss] ANT script - out of memory issue

2009-03-04T20:24:29Z

Try setting jvmargs attribute to ur <findbugs> tag like this.

Change the memory size with respect your need..

~Muthu

From: findbugs-discuss-bounces@... [mailto:findbugs-discuss-bounces@...] On Behalf Of Ben Groeneveld
Sent: Wednesday, March 04, 2009 11:09 PM
To: Collins, Paul; 'findbugs-discuss@...'
Subject: Re: [FB-Discuss] ANT script - out of memory issue

Maybe try setting or export ANT_OPTS-Xmx1G. Ben.

From: findbugs-discuss-bounces@... [mailto:findbugs-discuss-bounces@...] On Behalf Of Collins, Paul
Sent: Wednesday, March 04, 2009 7:39 AM
To: 'findbugs-discuss@...'
Subject: [FB-Discuss] ANT script - out of memory issue

I have an ANT script that works fine on small war files but if I try to execute it on a large one I get the error below, how do I go about increasing the memory size? All hints welcome.

findbugs:

[findbugs] Executing findbugs from ant task

[findbugs] Running FindBugs...

[findbugs] Out of memory

[findbugs] Total memory: 66M

[findbugs] free memory: 0M

[findbugs] Analyzed: C:\built-perforce\deliverables\mposNew-release\janus.war

[findbugs] Exception in thread "main" java.lang.OutOfMemoryError: Java heap space

Regards

Paul Collins

The information contained in this email is intended only for the individual to whom it is addressed. It may contain privileged and/or confidential information.If you have received this message in error please notify the sender immediately and delete the message from your computer. The unauthorised use, disclosure, copying or alteration of this message is forbidden. The sender will not be liable for direct, special, indirect or consequential damage as a result of any virus being passed on, or arising from alteration of the contents of this message by a third party. www.vertexna.com

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Way to simplify the way the ant task is written?

2009-02-20T13:19:13Z

Hi,

I'm using Ant 1.6 with FindBugs 1.3.7. I want to tell FindBugs to include all the JARS within a certain directory for its classpath, but this isn't working ...

<target name="findBugs" >
<FindBugs home="${findBugsHome}" output="html" outputFile="${findBugsOutputFile}" jvmargs="${jvmargs}" projectName="regui" >
<class location="${build}/${war-file-name}" />
<auxClasspath path="web/WEB-INF/lib/*.jar" />
<sourcePath path="${srcDir}/com" />
</FindBugs>
</target>

I get the error

[FindBugs] The following errors occurred during analysis:
[FindBugs] Cannot open codebase filesystem:C:\Temp\Routing_Engine\ui\web\WEB-INF\lib\*.jar
[FindBugs] java.util.zip.ZipException: Error opening C:\Temp\Routing_Engine\ui\web\WEB-INF\lib\*.jar
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.ZipFileCodeBase.<init>(ZipFileCodeBase.java:56)
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.ZipCodeBaseFactory.makeZipCodeBase(ZipCodeBaseFactory.java:40)
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.ClassFactory.createFilesystemCodeBase(ClassFactory.java:96)
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.FilesystemCodeBaseLocator.openCodeBase(FilesystemCodeBaseLocator.java:75)
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.ClassPathBuilder.processWorkList(ClassPathBuilder.java:560)
[FindBugs] At edu.umd.cs.findbugs.classfile.impl.ClassPathBuilder.build(ClassPathBuilder.java:195)
[FindBugs] At edu.umd.cs.findbugs.FindBugs2.buildClassPath(FindBugs2.java:626)
[FindBugs] At edu.umd.cs.findbugs.FindBugs2.execute(FindBugs2.java:184)
[FindBugs] At edu.umd.cs.findbugs.FindBugs.runMain(FindBugs.java:323)
[FindBugs] At edu.umd.cs.findbugs.FindBugs2.main(FindBugs2.java:1069)

Any ideas what I'm doing wrong? Do I have to list each JAR file? - Dave

Re: [FB-Discuss] FindBugs does not report line number

2009-02-12T22:16:21Z

Hi Jed,

make sure that your <javac> ant task has debug="on" argument. If there are
no line attributes in class files, how can FindBugs report them? :p

On Fri, 13 Feb 2009 03:30:48 +0100, Jed Mitten <jed.mitten@...>
wrote:
[...]
> I ran FindBugs on this set of code (using C:\antbuild as Class dir and
> C:\src, C:\src-newer as my Sources) and, while FindBugs does find
> issues, it does NOT indicate what line number, which means my XSL report
> generator is not working correctly.
>
> Does anyone know where I can go from here or what is happening? I need
> to use ant instead of Eclipse moving forward.

--
Kind regards,
Mit freundlichen Grüßen
Andrei Loskutov

@Home: http://andrei.gmxhome.de/
_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: FindBugs timeout error

2008-12-01T13:00:51Z

I'm running into the same problem, running findbugs for large codebase and it timeout after 10 mins.

I'm not using maven so the error message must be coming from Findbugs.

findbugs:
[findbugs] Executing findbugs from ant task
[findbugs] Running FindBugs...
[findbugs] Timeout: killed the sub-process
[findbugs] at org.apache.tools.ant.taskdefs.Java.fork(Java.java:754)
[findbugs] at org.apache.tools.ant.taskdefs.Java.executeJava(Java.java:171)

[findbugs] at edu.umd.cs.findbugs.anttask.AbstractFindBugsTask.execFindbugs
(AbstractFindBugsTask.java:334)
[findbugs] at edu.umd.cs.findbugs.anttask.AbstractFindBugsTask.execute(Abst
ractFindBugsTask.java:207)
[findbugs] at org.apache.tools.ant.UnknownElement.execute(UnknownElement.ja
va:275)
[findbugs] at org.apache.tools.ant.Task.perform(Task.java:364)
[findbugs] at org.apache.tools.ant.Target.execute(Target.java:341)
[findbugs] at org.apache.tools.ant.Target.performTasks(Target.java:369)
[findbugs] at org.apache.tools.ant.Project.executeSortedTargets(Project.jav
a:1216)
[findbugs] at org.apache.tools.ant.Project.executeTarget(Project.java:1185)

[findbugs] at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(De
faultExecutor.java:40)
[findbugs] at org.apache.tools.ant.Project.executeTargets(Project.java:1068
)
[findbugs] at org.apache.tools.ant.Main.runBuild(Main.java:668)
[findbugs] at org.apache.tools.ant.Main.startAnt(Main.java:187)
[findbugs] at org.apache.tools.ant.launch.Launcher.run(Launcher.java:246)
[findbugs] at org.apache.tools.ant.launch.Launcher.main(Launcher.java:67)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Jeff Jensen wrote:

Hi,

We run FindBugs via Maven, and have had this error the past few days:

[echo] Running the FindBugs task...
[findbugs] Running FindBugs...
[findbugs] [ERROR] Timeout: killed the sub-process

Can anyone tell me what causes this?

We have a large and growing codebase (over 4500 .java files). I am
wondering if it kills itself after running a certain duration?

I did not find a timeout setting in FindBugs config.

Or perhaps this message is a red herring, perhaps masking an out of memory
or something else?

This first happened a couple of months ago, and I set the detail to high.
It solved the problem.

These are my properties:

maven.findbugs.enable=true
maven.findbugs.detail=high
maven.findbugs.workHard=true
maven.findbugs.excludeFilter=src/conf/findbugs/findbugsexcludefilter.xml

Any advice?

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@mimsy.cs.umd.edu
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: [FB-Discuss] problem with 1.3.5 release and ant

2008-09-15T14:23:47Z

I ran into an issue with the latest 1.3.5 plugin and Eclipse 3.4.0. It
reported 270,000+ errors and then ran out of memory. Not sure if this
is related but thought I'd add as a data point.

Have had to revert to 1.3.4 for now.

-Clark

Hale Boyes, Kevin wrote:

> Yes, I also see the error. I'm ignoring it for now. Here's the message
> I get:
>
> [findbugs] Executing findbugs from ant task
> [findbugs] Running FindBugs...
> [findbugs] Error: The path d:\project\lib\findbugs-1.3.5\plugin does
> not seem to be a directory!
> [findbugs] No FindBugs plugins could be loaded
>
> Kevin.
>

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

How to find out a file's abs source path from the findbugs report

2008-08-13T22:53:33Z

Hi All,

We need to get a file's abs path from the findbugs report(xml format).

We used to concated the value of sourcepath subelement of the SourceLine and the value of SrcDir to make a full path.

However now we encounter some projects which have multiple SrcDirs, and we need to figure out which file comes from which SrcDir or let findbugs report display a file's abs path directly instead of showing the pacakge name

Any suggestions or comments are very appreciated!

Wrapping a JUnit test around FindBugs

2008-05-22T13:29:36Z

I'd like to be able to 'assert' there are no bugs in my project. Is this possible? Can anyone point the way or provide a recipe?

David

Can you track a bug from a Java class to its origin (e.g. a field in a JSP page)?

2008-03-14T04:34:57Z

I need to track a bug e.g. SQL injection vulnerability from the Java class where a SQL select statement with username&password is being dynamically created, back to the origin of the input (i.e. eg username & password fields in a JSP page), so that I could try and exploit this vulnerability via black box testing. Does anyone have any resources/advice to what I should be looking at?

Thanks a lot

FindBugs should suggest a resolution for Math.abs(Integer.MIN_VALUE)

2008-01-02T11:18:03Z

The error is "Bad attempt to compute absolute value of signed 32-bit hashcode" which is nice and all but the message should suggest possible resolutions as mentioned at http://findbugs.blogspot.com/2006/09/is-mathabs-broken.html

Other reports include suggested resolutions, this one should too. Should I file an official bug report for this?

Gili

Eclipse Plugin

2007-12-21T22:27:21Z

Hi Folks!

I'm in the process of trying FindBugs via the Eclipse plugin out. I've some questions about the usage of the plugin. (I'm currently not using my development PC so I may not use he correct terms.)

1) How do I use FindBugs filter files without putting the files in the Eclipse project directory? I've multiple Eclipse projects and I intend to use the same FindBugs filter files for each project. I don't want to duplicate the filter files which will make the files hard to maintain. When adding a filter file with the Eclipse plugin the file browser uses the project home as root directory. How do I add an external filter file?

2) How do I hide a FindBugs bug / warning? After reviewing a bug / warning and marking it (i.e. fix) I don't want the bug / warning get in my way. The bug / warning still is displayed in the FindBugs tree view and in the Eclipse Problems view. What is the correct way of using the FindBugs Eclipse plugin to don't have to review the same bugs / warnings over and over again?

Any help appreciated, thanks!

FindBugs and Filter

2007-09-17T12:15:08Z

Hi,

I am using findBugs with Ant Script. I need to include filters with Match clauses in the Filter xml file.
I have gone through many examples on the net, but was unable to run findbugs with filters. Can anyone please help me with this.

Regards,
Beanie

ant task with out auxclass

2007-09-05T00:32:13Z

Hi All,

I'm new to findbugs, recently I've integrated findbugs in my build scritp as

<target name="findbugs">
<findbugs home="${findbugs.home}"
output="xml"
outputFile="${build.home}\bcel-fb.xml" >
<auxClasspath path="${findbugs.home}/lib/Regex.jar" />
<sourcePath path="${basedir}/src/java" />
<class location="${findbugs.home}/BCEL.jar" />
</findbugs>

when I look at the report I've noticed many other java files which are not part of my source code
they were seems to be from regex.jar or BCEL.jar

How do I run the tool only on my source code so that I can only see the analysis done on only my source code.

Thanks in Advance

-Vamsi Hari

Problem on running Find Bugs on command line

2007-02-28T07:22:12Z

Hi,

I am new in using Find Bugs. Just now I downloaded Find Bugs 1.1.3. I am running Find Bugs on command line.
I am running the below command and it is always giving Usage : findBugs [general options]....

Can any one correct me whether I miss anything on the command that I am executing

findbugs -textui -sortByClass -xml:withMessages -outputFile D:\AuditProject\AuditTools\JavaSource\FindBugs.xml -auxclasspath D:\AuditProject\AuditTools\WebContent\WEB-INF\classes -sourcepath D:\AuditProject\AuditTools\JavaSource

I really appreciate anyhelp on this.

Thanks & Regards
Srikanth.

Release candidates for FindBugs 1.2.0

2007-02-22T12:46:29Z

We've started putting out release candidates for FindBugs 1.2.0.

Release candidate 1.2.0-rc1 is available from sourceforge and the
eclipse update site http://findbugs.cs.umd.edu/eclipse-candidate/

This is a preview release, intended to help us resolve any problems.
While we welcome your evaluation and feedback, we don't recommend
putting the early release candidates into production without an
evaluation of whether they are working well for you.

We hope to have 1.2.0 final out within two weeks.

Big changes for this release:
* interprocedural analysis of which methods always return nonnull values
* better ordering of class and method analysis to produce better results
* Some modifications to the null pointer analysis to allow us to more
concisely describe the program points that explain the error.
* bug fixes

Bill Pugh
_______________________________________________
Findbugs-announce mailing list
Findbugs-announce@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-announce

Re: FindBugs timeout error

2007-01-29T09:03:43Z

Hi all - I'm running into the same problem using Ant 1.6.4 on Solaris. No problems however using Windows and Ant 1.6.5.

My timeout was set to 25 mins but still no luck on solaris.

Did you find a solution yet? I'm not using maven so the error message must be coming from Findbugs.

[findbugs] Timeout: killed the sub-process
[findbugs] at org.apache.tools.ant.taskdefs.Java.fork(Java.java:754)
[findbugs] at org.apache.tools.ant.taskdefs.Java.executeJava(Java.java:171)
[findbugs] at edu.umd.cs.findbugs.anttask.FindBugsTask.execFindbugs(FindBugsTask.java:780)
[findbugs] at edu.umd.cs.findbugs.anttask.FindBugsTask.execute(FindBugsTask.java:492)
[findbugs] at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
[findbugs] at org.apache.tools.ant.Task.perform(Task.java:364)
[findbugs] at org.apache.tools.ant.Target.execute(Target.java:341)
[findbugs] at org.apache.tools.ant.Target.performTasks(Target.java:369)
[findbugs] at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
[findbugs] at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
[findbugs] at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:40)
[findbugs] at org.apache.tools.ant.Project.executeTargets(Project.java:1068)
[findbugs] at org.apache.tools.ant.Main.runBuild(Main.java:668)
[findbugs] at org.apache.tools.ant.Main.startAnt(Main.java:187)
[findbugs] at org.apache.tools.ant.Main.start(Main.java:150)
[findbugs] at org.apache.tools.ant.Main.main(Main.java:240)
[findbugs] Output saved to bugReport.html

Thanks,
Shawn

Hi,

We run FindBugs via Maven, and have had this error the past few days:

[echo] Running the FindBugs task...
[findbugs] Running FindBugs...
[findbugs] [ERROR] Timeout: killed the sub-process

Can anyone tell me what causes this?

We have a large and growing codebase (over 4500 .java files). I am
wondering if it kills itself after running a certain duration?

I did not find a timeout setting in FindBugs config.

Or perhaps this message is a red herring, perhaps masking an out of memory
or something else?

This first happened a couple of months ago, and I set the detail to high.
It solved the problem.

Announcing FindBugs 1.1.2

2006-12-24T20:57:59Z

We have released FindBugs 1.1.2. It is available from

http://findbugs.sourceforge.net/downloads.html

And the Eclipse plug is available from the auto update sites for our plugin:

http://findbugs.cs.umd.edu/eclipse/ Use this update site to receive only official releases

http://findbugs.cs.umd.edu/eclipse-candidate/ Use this update site to receive release candidates as well

http://findbugs.cs.umd.edu/eclipse-daily/ Use this update site to receive daily builds as well

(although at the moment we don't actually update it daily)

This has turned out to be a more significant release than originally anticipated. Hopefully, 1.1.3 will be a quick

release primarily to address any issues that arise with 1.1.2 (although we got a lot of great help from our user community

testing release candidates for 1.1.2; thank you).

New Features since 1.1.1:

Added check for infinite iterative loops
Added check for use of incompatible types in a collection (e.g., checking to see if a Set<String> contains a StringBuffer).
Added check for invocations of equals or hashCode on a URL, which, surprising many people, requires DNS resolution.
Added check for classes that define compareTo but not equals; such classes can exhibit some anomalous behavior (e.g., they are treated differently by PriorityQueues in Java 5 and Java 6).
Added a check for useless self operations (e.g., x < x or x ^ x).
Fixed a datarace that could cause the GUI to fail on startup
Partial internationalization of the new GUI
Fix bug in "Redo analysis" option of new GUI
Tuning to reduce false positives
Fixed a bug in null pointer analysis that was generating false positive null pointer warnings on exception paths. Fixing this bug eliminates about 1/4 of the warnings on null pointer exceptions on exception paths.
Fixed a bug in the processing of phi nodes for fields in the null pointer analysis
Applied contributed patch that provides more quick fixes in Eclipse plugin.
Fixed progress bar in Eclipse plugin
A number of other bug fixes.

To give you a sense of the changes in FindBugs from 1.0 to 1.1.1 and 1.1.2, I include below the analysis I did of

the results of running different versions of FindBugs against Glassfish v2-v26, as part of an effort to convince people

to move from older versions of FindBugs to FindBugs 1.1.2. We are very please and happy with our results, and believe

you will find that a significant majority of the high/medium priority correctness warnings generated by FindBugs 1.1.2

generate a WTF or an OMG reaction.

Bill Pugh

------ Changes in FindBugs from 1.0.0 to 1.1.1 and to 1.1.2 ----

The primary change from FindBugs 1.0.0 to 1.1.1 and from

1.1.1 to 1.1.2 is some additional heuristics to eliminate

false positives and recategorize some lesser issues as bad practice

or dodgy code rather than correctness.

Here are the total number of medium and high priority correctness

warnings found by various versions of FindBugs in Glassfish v2-b26:

1.0.0: 1163 warnings

1.1.0: 428 warnings

1.1.2: 379 warnings

There are actually only 3 bugs found by 1.1.2 in glassfish that are not

found by 1.1.1:

M C GC: com.sun.appserv.management.client.ConnectionSource is incompatible with expected argument javax.management.MBeanServerConnection in com.sun.appserv.management.client.ProxyFactory.findInstance(ConnectionSource) At ProxyFactory.java:[line 453]

H C GC: java.lang.Integer is incompatible with expected argument java.lang.String in com.sun.appserv.management.util.jmx.NotificationEmitterSupport.decrementListenerCountForType(String) At NotificationEmitterSupport.java:[line 189]

H C GC: oracle.toplink.essentials.descriptors.DescriptorEvent is incompatible with expected argument java.lang.Integer in oracle.toplink.essentials.internal.ejb.cmp3.metadata.listeners.MetadataEntityListener.isSessionPostBuildEvent(oracle.toplink.essentials.descriptors.DescriptorEvent) At MetadataEntityListener.java:[line 370]

There are all cases where FindBugs checks for incompatible types in the use of a generic collection (e.g., checking to see if a Set<String> contains an Integer.

FindBugs 1.1.1 reports a total of 162 warnings not reported by FindBugs 1.0.0.

Of the 1163 issues reported by FindBugs 1.0.0 as medium/high correctness warnings:

56 are no longer reported at all

122 are reported as medium/high priority dodgy code warnings

182 are reported as low priority warnings (and thus not usually reported at all)

210 are still reported as medium/high priority correctness warnings

593 are now reported as bad practice, rather than correctness warnings

Of the bugs reclassified as Bad Practice:

167 non serializable fields in serializable classes

56 calls to System.exit

74 places where an exception might be ignored

38 explicit invocations of a finalize method

69 classes that define equals but not hashcode

and similar issues.

Bill

_______________________________________________
Findbugs-announce mailing list
Findbugs-announce@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-announce

Free web-hosted FindBugs scans and collaborative auditing for Open Source Java projects.

2006-12-18T08:46:44Z

Fortify Software, in conjunction with the FindBugs project, is
providing free code quality
scans and auditing for open source Java projects at the Java Open
Review web site:

http://opensource.fortifysoftware.com/
http://extra.fortifysoftware.com/blog/2006/12/
java_open_review_project.html

This service includes scans using both FindBugs and Fortify's Source
Code Analysis, which
looks for security bugs such as SQL injection and cross site
scripting. Both scans are filtered
to produce only the highest priority warnings (for FindBugs, only
medium and high priority
correctness warnings), although this can be modified on a per-project
basis.

Scan results are made available only to individuals authorized by the
project to review the
results. The web site shows the source lines associated with each
warning, so that the warning
can be viewed in context. In fact, you can pretty much navigate the
entire source tree, making
it a web-based (read-only) IDE. The web site also allows each warning
to be flagged as "should fix" or
"don't fix" and allows comments to be made on each warning, perhaps
explaining why something needs
to be fixed, why it doesn't need to be fixed, or who should be
responsible for fixing it.

Fortify will download updates from your source code repository on a
regular basis, rerun the analysis
(including any improvements made to the analysis), and update the web
site, retaining any flagging
or comments on the warnings made by contributors on the previous
analysis results. Thus, once something has
been flagged as "don't fix", it stays flagged as "don't fix".

For open source projects, particularly ones with many project members
that are geographically
distributed, this is _way_ better than running Findbugs, generating
an HTML report
and posting it on a web site for project members to view.

Are you interested? There is a link on the Java Open Review project
web page to submit a project.

We're also looking for some projects that would be brave and let us
make all of there results visible to
the entire world, so we can show off what FindBugs and Fortify's
static analysis can do. Is your project one
of those?

Bill Pugh

p.s. Fortify Software is the sponsor of the FindBugs project and
provides financial support crucial
to the FindBugs project.

_______________________________________________
Findbugs-announce mailing list
Findbugs-announce@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-announce

[FB-Announce] Fortify Software is now the lead sponsor of the FindBugs project

2006-05-15T04:12:51Z

Fortify Software has become the lead sponsor of the FindBugs project.
Fortify Software sells security products, including Source Code
Analysis (SCA), a system for performing static analysis for security
vulnerabilities. Support from Fortify Software has allowed the
University of Maryland to hire a full time engineer, Brian Cole, to
work on the open source FindBugs project. FindBugs can be run as a
plugin in Fortify's SCA tool, and provides a unified toolset and
workflow for generating, viewing and auditing warnings about both
security and code quality defects. Full support for running FindBugs
within SCA will be available in Fortify's fall release of SCA,
although it can be demonstrated (with a few rough patches) in SCA
version 3.5.1.

The support from Fortify Software has allowed us to do enough
engineering and bug fixing that we are preparing to release the 1.0
version of FindBugs within the next two weeks.

Bill Pugh

Press release

FORTIFY SOFTWARE SPONSORS FINDBUGS OPEN SOURCE PROJECT

Leading Java Error Detection Tool to Benefit from Unique Commercial-
Open Source Relationship

SAN FRANCISCO, Calif. – May 15, 2006 – Fortify Software Inc., a
leading provider of security products that help companies identify,
manage and remediate software vulnerabilities to mitigate enterprise
security risk, today announced that Fortify has joined the FindBugs
project as a sponsor, and is helping to expand the functionality of
the open source tool, which has had over 200,000 downloads.

FindBugs, originally developed by William Pugh, professor at the
University of Maryland, Packard Fellow, and a member of Fortify’s
Technical Advisory Board, is an open source software tool which looks
for bugs in Java programs and detects common coding mistakes. The
software is based on the concept of bug patterns, and shows potential
problems to programmers as they code.

In addition to its sponsorship, Fortify also announced Findbugs’
integration with its award winning Fortify Source Code Analysis
product. Developers can run FindBugs in conjunction with Fortify
Source Code Analysis, and can then load and view the results from
various Fortify tools such as Fortify Audit Workbench and Fortify
Software Security Manager, giving developers a central view of all
results.

“Bugs are a fact of life. I try as hard as I can to write bug-free
code, but still the bugs creep in,” said Josh Block, Chief Java
technology architect at Google. “Since you can't avoid introducing
bugs, it's critical to find and exterminate them. FindBugs is the
easiest, most effective way I know to find the bugs that lurk in my
code.”

“We are proud to support the FindBugs project, as a sponsor and
through integration with our Fortify Source Code Analysis product,”
said Barmak Meftah, Fortify’s Vice President of Engineering and
Operations. “Our goal of ensuring software security and protecting
the vital assets of our customers is complementary to FindBugs’ goal
of finding bugs in Java software, and we are proud to align ourselves
with this open source organization. We look forward to working with
FindBugs, and helping them to develop and expand their leading bug-
finding tools.”

”FindBugs has been a very interesting project, and I’m excited that
it has become so widely used and useful,” said William Pugh, a
professor of Computer Science at the University of Maryland. “When
David Hovemeyer, the Ph.D. student who developed FindBugs as part of
his thesis, graduated, I was worried that we wouldn’t be able to
maintain the level of engineering support that a widely used tool
such as FindBugs needs, or do many other useful things not easily be
funded by academic research grants. The partnership with Fortify
Software is a win for everyone. It gives Fortify’s customers an
integrated tool to detect bugs, and it gives us funds to support and
improve the open source FindBugs infrastructure. The partnership with
Fortify will help provide us with feedback on the real needs of
production developers, and give us a strong and widely deployed
platform on which to build additional tools to improve software
reliability.”

About Fortify Software, Inc.
Fortify Software products protect companies from the threats posed by
security flaws in business-critical software applications. Its
software security products, Fortify Source Code AnalysisSuite,
Fortify Security Tester and Fortify Application Defense, drive down
costs and security risks by automating key processes of developing
and deploying secure applications. Fortify Software is backed by
leading investors, including Kleiner, Perkins, Caufield & Byers, and
a world-class team of software security advisors and partners. More
information is available at www.fortifysoftware.com.

About FindBugs

FindBugs looks for bugs in Java programs and is free software,
available under the terms of the Lesser GNU Public License. It is
written in Java, and can be run with any virtual machine compatible
with Sun's JDK 1.4. It can analyze programs written for any version
of Java. It can be run from the command line, from within Ant, a
GUI tool, or IDE’s such as Eclipse and Netbeans. FindBugs was
originally developed by David Hovemeyer and Bill Pugh. It is
maintained by Bill Pugh, David Hovemeyer, Brian Cole, and a team of
volunteers. More information is available at http://
findbugs.sourceforge.net.
.

# # #

Press contact for Fortify:
Kim Milosevich, OutCast Communications
kim@...
415-392-8282

_______________________________________________
Findbugs-announce mailing list
Findbugs-announce@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-announce

candidate release FindBugs 0.9.7-rc2 available

2006-04-17T16:03:25Z

greetings,

FindBugs release 0.9.7-rc2 is now available at
http://findbugs.sourceforge.net/release/

This is a candidate release and is not intended
for wide distribution. There have really been only
two changes since the rc1 release
* stateless detectors are no longer cloned, must clear their own
state between .class files
* Eclipse plugin: fix serious threading bug
but these are potentially serious enough to justify
another candidate release.

Questions and comments are welcome.

-Brian Cole

Changes since verson 0.9.6:
* performance improvements
* ObjectType instances are cached to reduce memory footprint
* for performance and memory reasons stateless detectors are no
longer cloned, must clear their own state between .class files
* fixed bug in bytecode set lookup for methods--was causing bad
results for IS2 (and perhaps others)
* HTML output includes LongMessage text again (regression in
0.95 - 0.96)
* New detectors
o CalledMethods.java: builds a list of invoked methods for
other detectors to consult (non-reporting)
o UncallableMethodOfAnonymousClass.java: detect anonymous
inner classes that define methods that are probably intended to but
do not override methods in a superclass.
* Updated detectors
o FindFieldSelfAssignment.java: recognize separate fields
with the same name (one from superclass)
o FindLocalSelfAssignment2.java: handles backward branches
better (Dave Brosius)
o FindBadCast2.java: BC_NULL_INSTANCEOF changed to
NP_NULL_INSTANCEOF
o FindPuzzlers.java: eliminate false positive on setDate()
(Dave Brosius)
* Eclipse plugin
o fix serious threading bug
o French localization (David Cotton)
o fix bug when reporting inner classes (Peter Friese)
* Updated test case files
o Mwn.java (Carl Burke/Dave Brosius)
o DumbMethodInvocations.java (Anto paul/Dave Brosius)
* XML output includes garbage collection duration
* Swing GUI shows file name after Load Bugs command
* miscellaneous code cleanup

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

fb-contrib 2.4.0 released

2006-03-13T20:58:51Z

fb-contrib, a FindBugs plugin, has released version 2.4.0.

See http://fb-contrib.sourceforge.net for details.

and download here:
http://sourceforge.net/project/showfiles.php?group_id=147536

This version of the Plugin requires FindBugs 0.9.5 or later.

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

PMB_POSSIBLE_MEMORY_BLOAT

2006-03-10T23:28:24Z

It would seem that

PruneUnconditionalExceptionThrowerEdges.cachedResults
Methods.methods
NoteSuppressedWarnings.packages
DismantleBytecode.replaceSlashesWithDotsCache

should be cleared out when the project closes, at the least.

Maybe a ProjectClosingListener?
--dave

<BugInstance type="PMB_POSSIBLE_MEMORY_BLOAT" priority="2" abbrev="PMB"
category="CORRECTNESS">
<Class
classname="edu.umd.cs.findbugs.ba.PruneUnconditionalExceptionThrowerEdges">
<SourceLine
classname="edu.umd.cs.findbugs.ba.PruneUnconditionalExceptionThrowerEdges"
start="-1" end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="PruneUnconditionalExceptionThrowerEdges.java"
sourcepath="edu/umd/cs/findbugs/ba/PruneUnconditionalExceptionThrowerEdges.java"/>
</Class>
<SourceLine
classname="edu.umd.cs.findbugs.ba.PruneUnconditionalExceptionThrowerEdges"
start="129" end="129" startBytecode="518" endBytecode="518"
sourcefile="PruneUnconditionalExceptionThrowerEdges.java"
sourcepath="edu/umd/cs/findbugs/ba/PruneUnconditionalExceptionThrowerEdges.java"/>
<Field
classname="edu.umd.cs.findbugs.ba.PruneUnconditionalExceptionThrowerEdges"
name="cachedResults" signature="Ljava/util/Map;" isStatic="true">
<SourceLine
classname="edu.umd.cs.findbugs.ba.PruneUnconditionalExceptionThrowerEdges"
start="-1" end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="PruneUnconditionalExceptionThrowerEdges.java"
sourcepath="edu/umd/cs/findbugs/ba/PruneUnconditionalExceptionThrowerEdges.java"/>
</Field>
</BugInstance>

<BugInstance type="PMB_POSSIBLE_MEMORY_BLOAT" priority="2" abbrev="PMB"
category="CORRECTNESS">
<Class classname="edu.umd.cs.findbugs.detect.Methods">
<SourceLine classname="edu.umd.cs.findbugs.detect.Methods" start="-1"
end="-1" startBytecode="-1" endBytecode="-1" sourcefile="Methods.java"
sourcepath="edu/umd/cs/findbugs/detect/Methods.java"/>
</Class>
<SourceLine classname="edu.umd.cs.findbugs.detect.Methods" start="54"
end="54" startBytecode="7" endBytecode="7" sourcefile="Methods.java"
sourcepath="edu/umd/cs/findbugs/detect/Methods.java"/>
<Field classname="edu.umd.cs.findbugs.detect.Methods" name="methods"
signature="Ljava/util/Set;" isStatic="true">
<SourceLine classname="edu.umd.cs.findbugs.detect.Methods" start="-1"
end="-1" startBytecode="-1" endBytecode="-1" sourcefile="Methods.java"
sourcepath="edu/umd/cs/findbugs/detect/Methods.java"/>
</Field>
</BugInstance>

<BugInstance type="PMB_POSSIBLE_MEMORY_BLOAT" priority="2" abbrev="PMB"
category="CORRECTNESS">
<Class classname="edu.umd.cs.findbugs.detect.NoteSuppressedWarnings">
<SourceLine
classname="edu.umd.cs.findbugs.detect.NoteSuppressedWarnings" start="-1"
end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="NoteSuppressedWarnings.java"
sourcepath="edu/umd/cs/findbugs/detect/NoteSuppressedWarnings.java"/>
</Class>
<SourceLine
classname="edu.umd.cs.findbugs.detect.NoteSuppressedWarnings" start="84"
end="84" startBytecode="37" endBytecode="37"
sourcefile="NoteSuppressedWarnings.java"
sourcepath="edu/umd/cs/findbugs/detect/NoteSuppressedWarnings.java"/>
<Field classname="edu.umd.cs.findbugs.detect.NoteSuppressedWarnings"
name="packages" signature="Ljava/util/Set;" isStatic="true">
<SourceLine
classname="edu.umd.cs.findbugs.detect.NoteSuppressedWarnings" start="-1"
end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="NoteSuppressedWarnings.java"
sourcepath="edu/umd/cs/findbugs/detect/NoteSuppressedWarnings.java"/>
</Field>
</BugInstance>

<BugInstance type="PMB_POSSIBLE_MEMORY_BLOAT" priority="2" abbrev="PMB"
category="CORRECTNESS">
<Class classname="edu.umd.cs.findbugs.visitclass.DismantleBytecode">
<SourceLine
classname="edu.umd.cs.findbugs.visitclass.DismantleBytecode" start="-1"
end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="DismantleBytecode.java"
sourcepath="edu/umd/cs/findbugs/visitclass/DismantleBytecode.java"/>
</Class>
<SourceLine classname="edu.umd.cs.findbugs.visitclass.DismantleBytecode"
start="94" end="94" startBytecode="31" endBytecode="31"
sourcefile="DismantleBytecode.java"
sourcepath="edu/umd/cs/findbugs/visitclass/DismantleBytecode.java"/>
<Field classname="edu.umd.cs.findbugs.visitclass.DismantleBytecode"
name="replaceSlashesWithDotsCache" signature="Ljava/util/HashMap;"
isStatic="true">
<SourceLine
classname="edu.umd.cs.findbugs.visitclass.DismantleBytecode" start="-1"
end="-1" startBytecode="-1" endBytecode="-1"
sourcefile="DismantleBytecode.java"
sourcepath="edu/umd/cs/findbugs/visitclass/DismantleBytecode.java"/>
</Field>
</BugInstance>

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

FYI: Apache Tomcat jsp->servlets & findbugs

2006-02-23T17:33:41Z

FYI, Apache's Tomcat 5.5 series of app servers, generates incorrect class
files when converting jsp to servlets.
This causes FindBugs to be unable to view source information for these
files.

See: http://issues.apache.org/bugzilla/show_bug.cgi?id=38776

for details.

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: FindBugs 0.9.5 release

2006-02-19T23:48:19Z

Hi Eugene,

I am sorry you had to wait for background processing in the Eclipse FB plug-ini for so long. I have been quite busy with my other projects (AndroMDA and my day-time jobs) lately, so I hadn't found much time to do the background stuff for FindBugs.

Adding backgroudn processing to FB is no big deal after all, so I will try to take some time and integrate it for the next release. I cannot promise that I get it done this week, but I will try.

Thanks again for being such a true FB Eclipse plug-in user and also for providing us with feedback!

Peter

PS: when I first implemented the incremental project builder for FB, I hoped it would run faster. I also hoped that I could do some of the processing incrementally, avoiding to run it on your entire code base each time you save a file. However, it turned out that FB is a very demanding tool and not much can be done incrementally. If you have any suggestions in this area, please let me know.

> -----Original Message-----
> From: findbugs-discuss-bounces@...
> [mailto:findbugs-discuss-bounces@...] On Behalf Of
> Eugene Kuleshov
> Sent: Sunday, February 19, 2006 12:31 AM
> Cc: findbugs-discuss@...
> Subject: Re: [FB-Discuss] FindBugs 0.9.5 release
>
>
> Dave Brosius wrote:
>
> >> -- When FB kicked manually it bring up a modal progress
> dialog. I had
> >> to waid nearly 30 minutes when till finish on one of my
> large project.
> >> I don't really see what actually prevent from running
> analysis as a
> >> background job? Its been requested many times, but still
> not there.
> >> Note that configuring project builder is not an option for
> such big
> >> project. First of all build already slow and there is no
> really point
> >> to run these detectors all the time.
> >
> > You can always use the -textui mode of findbugs, ala
> >
> > findbugs -home . -textui -project findbugs.fb
>
> Are you suggesting to manually maintain a parallel .fb for project
> with over 50 dependencies and also loose quick navigation to
> the editor
> and ability to immediately edit/fix the affected place?
>
> regards,
> Eugene
>
> _______________________________________________
> Findbugs-discuss mailing list
> Findbugs-discuss@...
> http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss
>

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: FindBugs 0.9.5 release

2006-02-18T15:31:06Z

Dave Brosius wrote:

>> -- When FB kicked manually it bring up a modal progress dialog. I had
>> to waid nearly 30 minutes when till finish on one of my large project.
>> I don't really see what actually prevent from running analysis as a
>> background job? Its been requested many times, but still not there.
>> Note that configuring project builder is not an option for such big
>> project. First of all build already slow and there is no really point
>> to run these detectors all the time.
>
> You can always use the -textui mode of findbugs, ala
>
> findbugs -home . -textui -project findbugs.fb

Are you suggesting to manually maintain a parallel .fb for project
with over 50 dependencies and also loose quick navigation to the editor
and ability to immediately edit/fix the affected place?

regards,
Eugene

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: FindBugs 0.9.5 release

2006-02-18T15:16:50Z

----- Original Message -----
From: "Eugene Kuleshov" <eu@...>

>
> -- When FB kicked manually it bring up a modal progress dialog. I had to
> waid nearly 30 minutes when till finish on one of my large project. I
> don't really see what actually prevent from running analysis as a
> background job? Its been requested many times, but still not there. Note
> that configuring project builder is not an option for such big project.
> First of all build already slow and there is no really point to run
> these detectors all the time.

You can always use the -textui mode of findbugs, ala

findbugs -home . -textui -project findbugs.fb
_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: fb-contrib 2.2.0 released

2006-02-18T15:10:10Z

Thanks for the report. I've added these items to the bugs section here

https://sourceforge.net/tracker/index.php?func=detail&aid=1434350&group_id=147536&atid=768725

so i don't lose track of them.

----- Original Message -----
From: "Eugene Kuleshov" <eu@...>

> Few comments though:
>
> -- It would be nice to have list detector abbreviations somewhere on a
> web site.
>
> -- DLC detector does not say what fields/variables it is complaining
> about. It would be better if it show separate errors/warnings for each
> variable/field. BTW, JavaDoc for that detector is not right too.
> Also, it is unclear if detector is taking into the account, that code
> may need to preserve order and there was no LinkedHashSet for JRE before
> 1.4...
>
> -- Several detectors (including DLC) does not report line numbers if
> issues are related to fields. For those cases line number can be taken
> from any setfield opcode within <init> method (or <clinin> for static
> fields).
>
> -- SMII detector reports false positives for something like
> Class.forName("string") and SomeClass.class.getName()
>
> regards,
> Eugene

_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
http://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss