tag:old.nabble.com,2006:forum-2570Nabble - FindBugs2009-11-23T05:46:34ZFindBugs uses static analysis to inspect Java bytecode for occurrences of bug patterns. We have found that FindBugs finds real errors in most Java software. Because its analysis is sometimes imprecise, FindBugs can report false warnings, which are warnings that do not indicate real errors. In practice, the rate of false warnings reported by FindBugs is generally less than 50%. FindBugs home is <a href="http://findbugs.sourceforge.net/" target="_top" rel="nofollow">here</a>.tag:old.nabble.com,2006:post-26478348Re: Eclipse plug-in vs Ant discrepancy2009-11-23T05:46:34Z2009-11-23T05:46:34Zann.campbell
<br><font size=2 face="sans-serif">Christopher,</font>
<br>
<br><font size=2 face="sans-serif">Fair question.</font>
<br>
<br><font size=2 face="sans-serif">Here are my properties:</font>
<br>
<br><font size=2 face="sans-serif"> <property
name="findbugs.home" value="c:/findbugs-1.3.9"/></font>
<br><font size=2 face="sans-serif"> <property
name="findbugs.ant.jar" value="${findbugs.home}/lib/findbugs-ant.jar"/></font>
<br><font size=2 face="sans-serif"> </font>
<br>
<br><font size=2 face="sans-serif"><br>
Thanks,<br>
Ann<br>
<br>
------<br>
G. Ann Campbell<br>
Systems Engineer<br>
Low Level Systems, IS MFG<br>
Shaw Industries<br>
<br>
</font>
<br>
<br><font size=2><tt>> Date: Fri, 20 Nov 2009 14:35:28 -0800 (PST)<br>
> From: Christopher Popp <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26478348&i=0" target="_top" rel="nofollow">christopherpopp@...</a>><br>
> Subject: Re: [FB-Discuss] Eclipse plug-in vs Ant discrepancy<br>
> To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26478348&i=1" target="_top" rel="nofollow">findbugs-discuss@...</a><br>
> Message-ID: <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26478348&i=2" target="_top" rel="nofollow">381424.46868.qm@...</a>><br>
> Content-Type: text/plain; charset="us-ascii"<br>
> <br>
> Hi,<br>
> <br>
> I'm running FindBugs with an ant script and after a quick glance at
<br>
> the results I see it reporting "Dead store to local variable",
and <br>
> "Method ignores exceptional return value", and I believe
I have <br>
> seen instances of the others you have mentioned as well. <br>
> <br>
> Are you sure that your ant script is pointing to your 1.3.9 <br>
> installation of FindBugs? <br>
> <br>
> Here is the relevant part of my ant script for FindBugs:<br>
> <br>
> <property name="findbugs.home" value ="C:/findbugs-1.3.9/"
/><br>
> <target name="findbugs" depends="jar"><br>
> <taskdef name="findbugs" classname="edu.umd.cs.findbugs.anttask.<br>
> FindBugsTask"/><br>
> <findbugs home="${findbugs.home}" output="xml"
outputFile="findbugs-<br>
> result.xml"><br>
> <sourcePath path="${src.dir}" /><br>
> <class location="${jar.dir}/${ant.project.name}.jar"
/><br>
> </findbugs><br>
> </target><br>
> <br>
</tt></font>
<pre>**********************************************************
Privileged and/or confidential information may be contained in this message. If you are not the addressee indicated in this message (or are not responsible for delivery of this message to that person) , you may not copy or deliver this message to anyone. In such case, you should destroy this message and notify the sender by reply e-mail.
If you or your employer do not consent to Internet e-mail for messages of this kind, please advise the sender.
Shaw Industries does not provide or endorse any opinions, conclusions or other information in this message that do not relate to the official business of the company or its subsidiaries.
**********************************************************
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26478348&i=3" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26467879using find bugs with Eclipse J2EE projects2009-11-22T12:09:45Z2009-11-22T12:09:45ZChrisAdkinI'm quite happily using find bugs with Eclipse and conventional Java. So I thought I would try find bugs with a J2EE project I've working on, however when I right click on the source code an invike find bugs from the floating menu that appears, I get Java project does not exist or is not open: P/MyProject. It has ocurred to me that:-
<br><br>1) I need to create an explicit ant build.xml and add a task for findbugs and build the project from ant on the command line.
<br><br>2) Customise the build xml file that Eclipse uses
<br><br>3) What I trying to do despite working quite happily with the normal Java 1.5 JDK and Eclipse cannot be done with J2EE projects.
<br><br>Can someone please help me out here.<p>From forum: <a href="http://old.nabble.com/FindBugs---General-f2572.html" embed="fixTarget[2572]" target="_top" >FindBugs - General</a></p>tag:old.nabble.com,2006:post-26465308Multiple Exclude Filter Files2009-11-22T05:15:02Z2009-11-22T05:15:02ZRobert Zimmermann-3Hi,
<br><br>Is there an effort (or already an solution) to have FindBugs being
<br>able to use more than one exclude filter file at once?
<br>It would be helpful for setting up e.g. company excludes together with
<br>per project excludes.
<br><br>I am right now thinking about extending the findbugs-maven-plugin to
<br>allow this by merging multiple exclude files on XML level and passing
<br>that to FindBugs.
<br>That feature would only be available for maven users, but should be
<br>available for ant and IDE plugin users as well.
<br><br>Thanks,
<br> Robert Zimmermann
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26465308&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26451395Re: Eclipse plug-in vs Ant discrepancy2009-11-20T14:35:28Z2009-11-20T14:35:28ZChristopher Popp<html><head></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><div>Hi,</div><div><br></div><div>I'm running FindBugs with an ant script and after a quick glance at the results I see it reporting "<span class="Apple-style-span" style="font-family: sans-serif; font-size: small; ">Dead store to local variable", and "<span class="Apple-style-span" style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; "><font size="2" face="sans-serif">Method ignores exceptional return value</font>", <span class="Apple-style-span" style="font-family: arial, helvetica, sans-serif; "> and I believe I have seen instances of the others you have mentioned as well. </span></span></span></div><div><span class="Apple-style-span" style="font-family: sans-serif; font-size: small; "><span class="Apple-style-span" style="font-family: 'times new roman', 'new
york', times, serif; font-size: 16px; "><span class="Apple-style-span" style="font-family: arial, helvetica, sans-serif; "><br></span></span></span></div><div><span class="Apple-style-span" style="font-family: sans-serif; font-size: small; "><span class="Apple-style-span" style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; "><span class="Apple-style-span" style="font-family: arial, helvetica, sans-serif; ">Are you sure that your ant script is pointing to your 1.3.9 installation of FindBugs? </span></span></span></div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><br></div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt">Here is the relevant part of my ant script for FindBugs:</div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><br></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><property name="findbugs.home" value
="C:/findbugs-1.3.9/" /></div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span class="Apple-tab-span" style="white-space:pre"> </span><target name="findbugs" depends="jar"></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><taskdef name="findbugs" classname="edu.umd.cs.findbugs.anttask.FindBugsTask"/></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><findbugs home="${findbugs.home}" output="xml" outputFile="findbugs-result.xml"></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><sourcePath path="${src.dir}" /></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><class location="${jar.dir}/${ant.project.name}.jar" /></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></findbugs></div><div><span class="Apple-tab-span" style="white-space:pre"> </span></target></div></div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><br><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> "<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451395&i=0" target="_top" rel="nofollow">ann.campbell@...</a>" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451395&i=1" target="_top" rel="nofollow">ann.campbell@...</a>><br><b><span style="font-weight: bold;">To:</span></b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451395&i=2" target="_top" rel="nofollow">findbugs-discuss@...</a><br><b><span style="font-weight: bold;">Sent:</span></b> Fri, November 20, 2009 3:58:08 PM<br><b><span style="font-weight: bold;">Subject:</span></b> [FB-Discuss] Eclipse plug-in vs Ant discrepancy<br></font><br>
<br><font size="2" face="sans-serif">Hi,</font>
<br>
<br><font size="2" face="sans-serif">I'm not seeing this topic in the list
archives, so forgive me if this question is old ground.</font>
<br>
<br><font size="2" face="sans-serif">I'm running FindBugs 1.3.9 on a large
project via both the Eclipse plug-in and Ant.</font>
<br>
<br><font size="2" face="sans-serif">Using the default Eclipse plug-in settings,
I get 189 bugs.</font>
<br>
<br><font size="2" face="sans-serif">Using the Ant task I get 149.</font>
<br>
<br><font size="2" face="sans-serif">Missing from the Ant report are:</font>
<br><font size="2" face="sans-serif">* Dead store to local variable</font>
<br><font size="2" face="sans-serif">* Nullcheck of a value previously dereferenced</font>
<br><font size="2" face="sans-serif">* Redundant nullcheck</font>
<br><font size="2" face="sans-serif">* Useless control flow to next line</font>
<br><font size="2" face="sans-serif">* Method ignores exceptional return
value</font>
<br>
<br><font size="2" face="sans-serif">I'm trying to document the uses and
usage of FindBugs for my work group and would like to recommend incorporating
FindBugs into our build scripts, but am stymied by the difference in findings.
Particularly the missing 'useless control flow,' since that was a very
good catch.</font>
<br>
<br><font size="2" face="sans-serif">Can anyone tell me: </font>
<br><font size="2" face="sans-serif">1) why Ant finds fewer bugs than Eclipse</font>
<br><font size="2" face="sans-serif">2) how to find via Ant the bugs that
Eclipse catches.</font>
<br>
<br>
<br><font size="2" face="sans-serif">Here is my task:</font>
<br><font size="2" face="sans-serif"> <target
name="lookforbugs" if="findbugsAvailable"></font>
<br><font size="2" face="sans-serif">
<taskdef name="findbugs" classname="<a target="_blank" href="http://edu.umd.cs.findbugs.anttask.Fi" rel="nofollow">edu.umd.cs</a>.findbugs.anttask.FindBugsTask"></font>
<br><font size="2" face="sans-serif">
<classpath></font>
<br><font size="2" face="sans-serif">
<pathelement location="${findbugs.ant.jar}"/></font>
<br><font size="2" face="sans-serif">
</classpath></font>
<br><font size="2" face="sans-serif">
</taskdef></font>
<br><font size="2" face="sans-serif">
<findbugs home="${findbugs.home}"</font>
<br><font size="2" face="sans-serif">
outputFile="bugs.${version}.xml"</font>
<br><font size="2" face="sans-serif">
output="xml"</font>
<br><font size="2" face="sans-serif">
effort="max"</font>
<br><font size="2" face="sans-serif">
jvmargs="-Xmx1024m"</font>
<br><font size="2" face="sans-serif">
></font>
<br><font size="2" face="sans-serif">
<auxClasspath
refid="build.classpath"/></font>
<br><font size="2" face="sans-serif">
<sourcePath
path="src-ese" /></font>
<br><font size="2" face="sans-serif">
<sourcePath
path="src-shopflex3" /></font>
<br><font size="2" face="sans-serif">
<class
location="${build.dir}" /></font>
<br><font size="2" face="sans-serif">
</findbugs></font>
<br><font size="2" face="sans-serif"> </target></font>
<br>
<br><font size="2" face="sans-serif">I've tried reportLevel="experimental"
in the ant target and reportLevel="low." Both variants get me
740 bugs. </font>
<br>
<br><font size="2" face="sans-serif">It would also be nice to know how to
filter the Ant report by severity, if possible. </font>
<br>
<br>
<br><font size="2" face="sans-serif"><br>
Thanks,<br>
Ann<br>
<br>
------<br>
G. Ann Campbell<br>
Systems Engineer<br>
Low Level Systems, IS MFG<br>
Shaw Industries<br>
<br>
</font>
<pre>**********************************************************
Privileged and/or confidential information may be contained in this message. If you are not the addressee indicated in this message (or are not responsible for delivery of this message to that person) , you may not copy or deliver this message to anyone. In such case, you should destroy this message and notify the sender by reply e-mail.
If you or your employer do not consent to Internet e-mail for messages of this kind, please advise the sender.
Shaw Industries does not provide or endorse any opinions, conclusions or other information in this message that do not relate to the official business of the company or its subsidiaries.
**********************************************************
</pre></div></div><div style="position:fixed"></div>
<!-- cg18.c2.mail.re1.yahoo.com compressed/chunked Fri Nov 13 07:56:41 PST 2009 -->
</div><br>
</body></html><br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451395&i=3" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26451141Re: Eclipse plug-in vs Ant discrepancy2009-11-20T14:12:19Z2009-11-20T14:12:19ZAndrei LoskutovHi Ann!
<br><br>> 1) why Ant finds fewer bugs than Eclipse
<br><br>Eclipse uses it's own compiler (ecj), which generates different bytecode
<br>compared with javac (used as default by Ant).
<br>Because FindBugs inspects *byte*code, it has different outputs then...
<br><br>> 2) how to find via Ant the bugs that Eclipse catches.
<br><br>You have to specify Eclipse ecj compiler as Java compiler in the ant task.
<br>Simply check build files generated by Eclipse or Google for "ecj.jar
<br>compiler".
<br>For example, I've blogged once how to build Eclipse with it's own
<br>compiler:
<br><a href="http://www.jroller.com/andyl/entry/compiler_championship_continued" target="_top" rel="nofollow">http://www.jroller.com/andyl/entry/compiler_championship_continued</a><br>This was really fun btw ;-)
<br><br>On Fri, 20 Nov 2009 22:58:08 +0100, <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451141&i=0" target="_top" rel="nofollow">ann.campbell@...</a>> wrote:
<br><br>[...]
<div class='shrinkable-quote'><br>> I'm running FindBugs 1.3.9 on a large project via both the Eclipse
<br>> plug-in and Ant.
<br>>
<br>> Using the default Eclipse plug-in settings, I get 189 bugs.
<br>>
<br>> Using the Ant task I get 149.
<br>>
<br>> Missing from the Ant report are:
<br>> * Dead store to local variable
<br>> * Nullcheck of a value previously dereferenced
<br>> * Redundant nullcheck
<br>> * Useless control flow to next line
<br>> * Method ignores exceptional return value
</div>[...]
<br>> Can anyone tell me:
<br>> 1) why Ant finds fewer bugs than Eclipse
<br>> 2) how to find via Ant the bugs that Eclipse catches.
<br><br><br>--
<br>Kind regards,
<br>Mit freundlichen Grüßen
<br>Andrei Loskutov
<br><br>@Home: <a href="http://andrei.gmxhome.de/" target="_top" rel="nofollow">http://andrei.gmxhome.de/</a><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26451141&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26450983Eclipse plug-in vs Ant discrepancy2009-11-20T13:58:08Z2009-11-20T13:58:08Zann.campbell
<br><font size=2 face="sans-serif">Hi,</font>
<br>
<br><font size=2 face="sans-serif">I'm not seeing this topic in the list
archives, so forgive me if this question is old ground.</font>
<br>
<br><font size=2 face="sans-serif">I'm running FindBugs 1.3.9 on a large
project via both the Eclipse plug-in and Ant.</font>
<br>
<br><font size=2 face="sans-serif">Using the default Eclipse plug-in settings,
I get 189 bugs.</font>
<br>
<br><font size=2 face="sans-serif">Using the Ant task I get 149.</font>
<br>
<br><font size=2 face="sans-serif">Missing from the Ant report are:</font>
<br><font size=2 face="sans-serif">* Dead store to local variable</font>
<br><font size=2 face="sans-serif">* Nullcheck of a value previously dereferenced</font>
<br><font size=2 face="sans-serif">* Redundant nullcheck</font>
<br><font size=2 face="sans-serif">* Useless control flow to next line</font>
<br><font size=2 face="sans-serif">* Method ignores exceptional return
value</font>
<br>
<br><font size=2 face="sans-serif">I'm trying to document the uses and
usage of FindBugs for my work group and would like to recommend incorporating
FindBugs into our build scripts, but am stymied by the difference in findings.
Particularly the missing 'useless control flow,' since that was a very
good catch.</font>
<br>
<br><font size=2 face="sans-serif">Can anyone tell me: </font>
<br><font size=2 face="sans-serif">1) why Ant finds fewer bugs than Eclipse</font>
<br><font size=2 face="sans-serif">2) how to find via Ant the bugs that
Eclipse catches.</font>
<br>
<br>
<br><font size=2 face="sans-serif">Here is my task:</font>
<br><font size=2 face="sans-serif"> <target
name="lookforbugs" if="findbugsAvailable"></font>
<br><font size=2 face="sans-serif">
<taskdef name="findbugs" classname="edu.umd.cs.findbugs.anttask.FindBugsTask"></font>
<br><font size=2 face="sans-serif">
<classpath></font>
<br><font size=2 face="sans-serif">
<pathelement location="${findbugs.ant.jar}"/></font>
<br><font size=2 face="sans-serif">
</classpath></font>
<br><font size=2 face="sans-serif">
</taskdef></font>
<br><font size=2 face="sans-serif">
<findbugs home="${findbugs.home}"</font>
<br><font size=2 face="sans-serif">
outputFile="bugs.${version}.xml"</font>
<br><font size=2 face="sans-serif">
output="xml"</font>
<br><font size=2 face="sans-serif">
effort="max"</font>
<br><font size=2 face="sans-serif">
jvmargs="-Xmx1024m"</font>
<br><font size=2 face="sans-serif">
></font>
<br><font size=2 face="sans-serif">
<auxClasspath
refid="build.classpath"/></font>
<br><font size=2 face="sans-serif">
<sourcePath
path="src-ese" /></font>
<br><font size=2 face="sans-serif">
<sourcePath
path="src-shopflex3" /></font>
<br><font size=2 face="sans-serif">
<class
location="${build.dir}" /></font>
<br><font size=2 face="sans-serif">
</findbugs></font>
<br><font size=2 face="sans-serif"> </target></font>
<br>
<br><font size=2 face="sans-serif">I've tried reportLevel="experimental"
in the ant target and reportLevel="low." Both variants get me
740 bugs. </font>
<br>
<br><font size=2 face="sans-serif">It would also be nice to know how to
filter the Ant report by severity, if possible. </font>
<br>
<br>
<br><font size=2 face="sans-serif"><br>
Thanks,<br>
Ann<br>
<br>
------<br>
G. Ann Campbell<br>
Systems Engineer<br>
Low Level Systems, IS MFG<br>
Shaw Industries<br>
<br>
</font>
<pre>**********************************************************
Privileged and/or confidential information may be contained in this message. If you are not the addressee indicated in this message (or are not responsible for delivery of this message to that person) , you may not copy or deliver this message to anyone. In such case, you should destroy this message and notify the sender by reply e-mail.
If you or your employer do not consent to Internet e-mail for messages of this kind, please advise the sender.
Shaw Industries does not provide or endorse any opinions, conclusions or other information in this message that do not relate to the official business of the company or its subsidiaries.
**********************************************************
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26450983&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26320567excludeFilter in ant task not working?2009-11-12T07:20:17Z2009-11-12T07:20:17Zel07Hi,
<br><br>maybe this has already been asked but I didn't find any discussion with a solution.
<br><br>I am using the ant task (newest findbugs version, ant version 1.7
<br>I am not able to set an exclude filter to work.
<br>This is my ant task:
<br><br><target name="findbugs" description="run findbugs against project">
<br> <findbugs home="findbugs-home" output="text" excludeFilter="config/findbugs.xml" >
<br><auxClasspath refid="findbugs.aux" />
<br><sourcePath path="${src.dir.main}:${src.dir.test}" />
<br> <class location="${build.dest}/" />
<br></findbugs>
<br><br>When I run ant with -debug I can see the arguments which with findbugs is called:
<br>-Dfindbugs.home=...
<br>-classpath ...
<br>-sortByClass
<br>-timestampNow
<br>-auxclasspath ...
<br>-sourcepath ...
<br>-exitcode ...
<br><br>But no argument about excludeFilter.
<br>The same happens when setting includeFilter.
<br><br>This is my findbugs.xml:
<br><br><FindBugsFilter>
<br> <Match>
<br> <Bug pattern="NP_UNWRITTEN_FIELD" />
<br> </Match>
<br></FindBugsFilter>
<br><br>I also tried "NP" as pattern.
<br><br>Is this not expected to work or am I doing something wrong?
<br><br>Regards,
<br>Eddie
<br><br>--
<br>Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 -
<br>sicherer, schneller und einfacher! <a href="http://portal.gmx.net/de/go/atbrowser" target="_top" rel="nofollow">http://portal.gmx.net/de/go/atbrowser</a><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26320567&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26296820[PATCH] detectors for more dumb or deprecated methods2009-11-10T22:22:38Z2009-11-10T22:22:38ZChris Peterson-5I submitted a FindBugs patch on SourceForge [1]. This patch adds
<br>detectors for more dumb or deprecated methods [2]. Some of these
<br>checks were inspired by recommendations in Michael Nygard's excellent
<br>book "Release It!: Design and Deploy Production-Ready Software".
<br><br>chris
<br><br><br>[1] <a href="https://sourceforge.net/tracker/?func=detail&aid=2891689&group_id=96405&atid=614695" target="_top" rel="nofollow">https://sourceforge.net/tracker/?func=detail&aid=2891689&group_id=96405&atid=614695</a><br><br>[2]
<br><br>* DM_RUNTIME_EXIT_OR_HALT: Calling Runtime.exit() or Runtime.halt()
<br>shuts down the entire Java virtual machine. This should only been done
<br>when it is appropriate. Such calls make it hard or impossible for your
<br>code to be invoked by other code. Consider throwing a RuntimeException
<br>instead.
<br><br>* DM_RUNFINALIZATION: Triggering finalization can result in serious
<br>performance problems and may indicate incorrect resource cleanup.
<br><br>* EQ_BIGDECIMAL_EQUALS: equals() being called to compare two
<br>java.math.BigDecimal numbers. This is normally a mistake, as two
<br>BigDecimal objects are only equal if they are equal in both value and
<br>scale, so that 2.0 is not equal to 2.00. To compare BigDecimal objects
<br>for mathematical equality, use compareTo() instead.
<br><br>* DM_INETADDRESS_GETLOCALHOST: Do not call InetAddress.getLocalHost()
<br>on multihomed servers. On a multihomed server,
<br>InetAddress.getLocalHost() simply returns the IP address associated
<br>with the server's internal hostname. This could any of the network
<br>interfaces, which could expose the machine to security risks. Server
<br>applications that need to listen on sockets should add configurable
<br>properties to define which network interfaces the server should bind.
<br><br>* DM_PROMISCUOUS_SERVERSOCKET: Do not use the ServerSocket constructor
<br>or ServerSocketFactory.createServerSocket() factory methods that
<br>accepts connections on any network interface. By default, an
<br>application that listens on a socket will listen for connection
<br>attempts on any network interface, which can be a security risk. Only
<br>the long form the ServerSocket constructor or
<br>ServerSocketFactory.createServerSocket() factory methods take a
<br>specific local address to define which network interface the socket
<br>should bind.
<br><br>* RV_RANDOM_SEED: Random() constructor without a seed is insecure
<br>because it defaults to easily guessable seed:
<br>System.currentTimeMillis(). Initialize seed with
<br>Random(SecureRandom.getInstance().generateSeed()) or use SecureRandom
<br>instead.
<br><br>* RV_SECURERANDOM: The SecureRandom() constructors and
<br>SecureRandom.getSeed() method are deprecated. Call
<br>SecureRandom.getInstance() and
<br>SecureRandom.getInstance().generateSeed() instead.
<br><br>* DM_THREAD_PRIORITIES: Getting or setting thread priorities is not
<br>portable and could indicate race conditions.
<br><br>* DM_THREAD_YIELD: Manual thread scheduling with Thread.sleep() or
<br>Thread.yield() has no guaranteed semantics and is often used to mask
<br>race conditions.
<br><br>* DM_WAIT_WITHOUT_TIMEOUT: Calling {2} without timeout could block
<br>forever. Consider using a timeout to detect deadlocks or performance
<br>problems. Thread.join() Object.wait() Condition.await() Lock.lock()
<br>Lock.lockInterruptibly()
<br><br>* DM_THREAD_FAIRNESS: Calling Lock.tryLock() or
<br>ReentrantLock.tryLock() without a timeout does not honor the lock's
<br>fairness setting. If you want to honor the fairness setting for this
<br>lock, then use tryLock(0, TimeUnit.SECONDS) which is almost equivalent
<br>(it also detects interruption).
<br><br>* DM_SIGNAL_NOT_SIGNALALL: Condition.signalAll() is prefered over
<br>Condition.signal(). Calling signal() only wakes up one thread, meaning
<br>that the thread woken up might not be the one waiting for the
<br>condition that the caller just satisfied.
<br><br>* DM_LOCK_ISLOCKED: Calling ReentrantLock.isLocked() or
<br>ReentrantLock.isHeldByCurrentThread() might indicate race conditions
<br>or incorrect locking. These methods are designed for use in debug code
<br>or monitoring of the system state, not for synchronization control.
<br><br>* DM_STRINGBUFFER: StringBuffer's methods are synchronized.
<br>StringBuilder is faster and preferred if you don't need StringBuffer's
<br>thread safety.
<br><br>* DM_STRING_BYTES_ENCODING: The behavior of the String(byte[] bytes)
<br>and String.getBytes() is undefined if the string cannot be encoded in
<br>the platform's default charset. Instead, use the String(byte[] bytes,
<br>String encoding) or String.getBytes(String encoding)> constructor
<br>which accepts the string's encoding as an argument. Be sure to specify
<br>the encoding used for the user's locale.
<br><br>* DM_SETDEFAULTLOCALE: Do not use the Locale.setDefault() method to
<br>change the default locale. It changes the JVM's default locale for all
<br>threads and makes your applications unsafe to threads. It does not
<br>affect the host locale. Since changing the JVM's default locale may
<br>affect many different areas of functionality, this method should only
<br>be used if the caller is prepared to reinitialize locale-sensitive
<br>code running within the same Java Virtual Machine, such as the user
<br>interface.
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26296820&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26287503status of eclipse daily / candidate update sites2009-11-10T08:55:44Z2009-11-10T08:55:44ZHans Horn-2Folks,
<br><br>did the eclipse daily / candidate update sites get pulled?
<br><br>This is what I get when I try to update (Eclipse v3.5.1):
<br><br>Error
<br>Tue Nov 10 07:57:35 PST 2009
<br>Unknown Host: <a href="http://findbugs.cs.umd.edu/eclipse-daily/content.xml" target="_top" rel="nofollow">http://findbugs.cs.umd.edu/eclipse-daily/content.xml</a><br><br>java.net.UnknownHostException: findbugs.cs.umd.edu
<br>at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:177)
<br>at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
<br>at java.net.Socket.connect(Socket.java:525)
<br>at
<br>org.eclipse.ecf.provider.filetransfer.events.socket.SocketEventCreateUtil.createSocket(SocketEventCreateUtil.java:43)
<br><br>at
<br>org.eclipse.ecf.internal.provider.filetransfer.httpclient.ECFHttpClientProtocolSocketFactory.createSocket(ECFHttpClientProtocolSocketFactory.java:81)
<br><br>at
<br>org.eclipse.ecf.internal.provider.filetransfer.httpclient.ECFHttpClientProtocolSocketFactory.createSocket(ECFHttpClientProtocolSocketFactory.java:73)
<br><br>at
<br>org.eclipse.ecf.internal.provider.filetransfer.httpclient.ECFHttpClientProtocolSocketFactory.createSocket(ECFHttpClientProtocolSocketFactory.java:65)
<br><br>at
<br>org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
<br>at
<br>org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
<br><br>at
<br>org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
<br><br>at
<br>org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
<br><br>at
<br>org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
<br>at
<br>org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:346)
<br>at
<br>org.eclipse.ecf.provider.filetransfer.httpclient.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:204)
<br><br>at
<br>org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:71)
<br><br>at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)
<br><br>Thx.
<br>H.
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26287503&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26218074FL_MATH_USING_FLOAT_PRECISION2009-11-05T08:35:48Z2009-11-05T08:35:48ZTobias van TreeckRecently <span>findbugs</span> reported the following bug in my code:<br><br>FL_MATH_USING_FLOAT_PRECISION<br><p>The method performs math operations using floating point precision. Floating
point precision is very imprecise. For example, 16777216.0f + 1.0f =
16777216.0f. Consider using double math instead.</p><br>In
some other project i remembered that bug but didn't remember which
project it was, so i searched the online bug descriptions.<br>However i couldn't find the bug description there:<br>
<a href="http://findbugs.sourceforge.net/bugDescriptions.html" target="_blank" rel="nofollow">http://<span>findbugs</span>.sourceforge.net/bugDescriptions.html</a><br><br>Has it been forgotten?<br>Regards,<br>ToM
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26218074&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26216933How to filter on errors common to inner classes of a class.2009-11-05T07:32:24Z2009-11-05T07:32:24ZWim Veldhuis<div>Hello,</div><div><br></div><div>I am working on a project on which we recently integrated findbugs. As expected there are a lot of existing warnings which we incrementally are trying to either solve or to suppress them. A number of these warnings is about a serializable inner class (not static) like in :</div>
<div><br></div><div>package x;</div><div>public class Foo {</div><div> ...</div><div> private final class SomeAction extends javax.swing.AbstractAction {</div><div> ...</div><div> }</div><div>}</div><div><br></div>
<div>Findbugs reports a SE_BAD_FIELD_INNER_CLASS warning here. However in this case we know this is not a problem and want to suppress this specific warning. In the example, the class Foo actually has many inner classes and we want to suppress the warning on the outer class level. So I added a clause to our findbugs-exclude filter like</div>
<div><br></div><div><And></div><div> <Bug pattern="SE_BAD_FIELD_INNER_CLASS"/></div><div> <Or></div><div><span class="Apple-tab-span" style="white-space:pre"> </span><!-- Following classes declare actions as inner class, action are by default serializable --></div>
<div> <Class name="x.Foo"/></div><div> <Class name="y.AnotherFoo"/></div><div> </Or></div><div></And> </div><div><br></div><div>However Findbugs still reports these warnings, which is irritating as these are confirmed false positives.</div>
<div>I already tried "x.Foo$" and and "x.Foo$*" as class name, but to no avail.</div><div><br></div><div>Does anybody know how to specifiy that these warnings should be suppressed for all inner classes of Foo ?</div>
<div><br></div><div>Thanks in advance,</div><div>Wim Veldhuis.</div><div><br></div>
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26216933&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26205063Re: does 1.3.9 not find ANY bugs?2009-11-04T13:30:18Z2009-11-04T13:30:18ZcaptainmidnightSince I suspect that 1.3.9's not reporting any bugs is probably due to a misconfiguration on my part, I did a diff between the findbugs.bat files in 1.3.8 and 1.3.9.
<br><br>1.3.9's version has a LOT more stuff inside. Tons of options like
<br> -addMessages
<br> -computeBugHistory
<br>etc.
<br><br>As near as I can tell, these are all undocumented in the current manual
<br> <a href="http://findbugs.sourceforge.net/manual/running.html" target="_top" rel="nofollow">http://findbugs.sourceforge.net/manual/running.html</a><br>especially
<br> <a href="http://findbugs.sourceforge.net/manual/running.html#d0e511" target="_top" rel="nofollow">http://findbugs.sourceforge.net/manual/running.html#d0e511</a><br>and
<br> <a href="http://findbugs.sourceforge.net/manual/running.html#commandLineOptions" target="_top" rel="nofollow">http://findbugs.sourceforge.net/manual/running.html#commandLineOptions</a><br><br>Guessing, I tried adding a few of those options to my .bat file, but they all seemed to make FB abort.
<br><br>Does anyone know if I am not seeing bugs being reported because I need to update the options that I use with findbugs.bat?
<br><br><br><br>
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26205063&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26204916Re: does 1.3.9 not find ANY bugs?2009-11-04T13:24:33Z2009-11-04T13:24:33ZBill PughBrent,
<br> Yeah, sounds like some sort of problem. No changes that big between
<br>1.3.8 and 1.3.9.
<br><br> Is your code open or closed source?
<br><br> Can you try analyzing it on the command line or in ant, and
<br>generating xml? The XML will contain a bunch of diagnostic information.
<br>Alternatively, you can do "Save as..." from the GUI, select "Findbugs
<br>analysis file", and that will save the XML.
<br><br> If nothing else, look for the following entries in the XML:
<br><br> <Errors ...>
<br><br>and
<br><br> <FindBugsSummary...>
<br><br>FindBugs summary shouldn't contain any confidential data, and the
<br><Errors> start tag shouldn't contain any either (the nested elements
<br>inside the <Errors> tag might list class names.
<br><br>Can you send those to me?
<br><br><br>Bill
<br><br>On Nov 4, 2009, at 4:11 PM, Brent wrote:
<br><div class='shrinkable-quote'><br>> John:
<br>>
<br>>
<br>>> Put a bug in your code and see if it finds it.
<br>>
<br>> OK. I picked a random class and added this:
<br>>
<br>> static {
<br>> Object obj = null;
<br>> System.out.println( obj.toString() );
<br>> }
<br>>
<br>> It compiles with no warning.
<br>>
<br>> Running 1.3.8 yields, as expected, this bug:
<br>> Null pointer dereference
<br>>
<br>> Running 1.3.9 yields, again, no bugs.
<br>>
<br>> I cannot believe that 1.3.9 would have removed this bug pattern, so
<br>> there obviously has to be something wrong in my configuration of
<br>> 1.3.9. I just can't see it.
<br>>
<br>> All I did was download 1.3.9, unzip it, and then update my .bat
<br>> script file to run with its findbugs.bat script file instead of
<br>> 1.3.8's. No other configuration changes.
<br>>
<br>>
<br>> NOTE: to the find bugs developers: it would be nice if you could
<br>> copy text from the 2 bottom TextAreas in the gui.
<br>>
<br>>
<br>>
<br>> _______________________________________________
<br>> Findbugs-discuss mailing list
<br>> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26204916&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br>> <a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a></div><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26204916&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26204733Re: does 1.3.9 not find ANY bugs?2009-11-04T13:11:51Z2009-11-04T13:11:51ZcaptainmidnightJohn:
<br><br><br>> Put a bug in your code and see if it finds it.
<br><br>OK. I picked a random class and added this:
<br>
<br>static {
<br> Object obj = null;
<br> System.out.println( obj.toString() );
<br>}
<br><br>It compiles with no warning.
<br><br>Running 1.3.8 yields, as expected, this bug:
<br> Null pointer dereference
<br><br>Running 1.3.9 yields, again, no bugs.
<br><br>I cannot believe that 1.3.9 would have removed this bug pattern, so there obviously has to be something wrong in my configuration of 1.3.9. I just can't see it.
<br><br>All I did was download 1.3.9, unzip it, and then update my .bat script file to run with its findbugs.bat script file instead of 1.3.8's. No other configuration changes.
<br><br><br>NOTE: to the find bugs developers: it would be nice if you could copy text from the 2 bottom TextAreas in the gui.
<br><br><br>
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26204733&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26202338Re: does 1.3.9 not find ANY bugs?2009-11-04T10:43:45Z2009-11-04T10:43:45ZJohn PenixHi Brent,
<br><br>Put a bug in your code and see if it finds it.
<br><br>John
<br><br>On Wed, Nov 4, 2009 at 10:02 AM, Brent <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26202338&i=0" target="_top" rel="nofollow">yhbrent@...</a>> wrote:
<div class='shrinkable-quote'><br>> One more thing: when the FindBugs 1.3.9 GUI came up, I looked under the
<br>> View menu, and verified that all the settings were for maximum
<br>> viewability.
<br>>
<br>> In particular, the following choices were selected: All bug ranks, All issues, No matter when first seen. I never changed these choices in the first place (I think that they
<br>> are the defaults).
<br>>
<br>>
<br>>
<br>> _______________________________________________
<br>> Findbugs-discuss mailing list
<br>> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26202338&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br>> <a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br>>
</div><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26202338&i=2" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26201631Re: does 1.3.9 not find ANY bugs?2009-11-04T10:02:08Z2009-11-04T10:02:08ZcaptainmidnightOne more thing: when the FindBugs 1.3.9 GUI came up, I looked under the
<br>View menu, and verified that all the settings were for maximum
<br>viewability.
<br><br>In particular, the following choices were selected: All bug ranks, All issues, No matter when first seen. I never changed these choices in the first place (I think that they
<br>are the defaults).
<br><br><br>
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26201631&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26200559does 1.3.9 not find ANY bugs?2009-11-04T08:57:59Z2009-11-04T08:57:59ZcaptainmidnightI last used 1.3.8 several months ago on my personal code library, and it found several bugs (as well as many more non-bugs, but thats the nature of these things).
<br><br>I have made a lot of changes to my code library since then, so this morning I wanted to reanalyse. First thing that I did was download 1.3.9 since it ought to be better. When I ran it (from a .bat script file), it spent the usual minute or so analysing my code, and then it reported ZERO bugs!
<br><br>Puzzled, I reinstalled 1.3.8 and reran my .bat file, and sure enough, 68 "bugs" were flagged. (Probably most of them are not true bugs, but we'll see when I analyse them in more detail later.)
<br><br>Does anyone have any idea what happened here? Is 1.3.9 really just that good at not flagging bogus bugs? Or (probably more likely) is there a usage error on my part, like some new kind of option that I have not configured?
<br><br>Below is the relevant part of my .bat file (notice that I AM using -effort:max):
<br><br>set findBugsDir=C:\Program Files\Java\findbugs-1.3.9\bin
<br><br>set effort=-effort:max
<br><br>set project=-project [code path relevant only to me]
<br><br>set properties=-property "findbugs.assertionmethods=bb.util.Check.notNull"
<br>set properties=%properties% -property "findbugs.de.comment=true"
<br>set properties=%properties% -property "findbugs.maskedfields.locals=true"
<br><br>cmd /c "cd /d %findBugsDir% && findbugs.bat %effort% %project% %properties%"
<br><br><br>I searched this list's archives before posting, and did not seem to see anything.
<br><br><br><br>
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26200559&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26040069Does the FInd Bugs acts on the class files or source files ??2009-10-24T08:31:23Z2009-10-24T08:31:23Zkiran781Please let me know
<br><br>Does the FInd Bugs acts on the class files or source files ??<p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26040064Meaning of Dead Store Variable2009-10-24T08:30:36Z2009-10-24T08:30:36Zkiran781<br>Hi i am new to FindBugs so please help me .
<br><br>what is meant by Dead store to a variable
<br><br>Thanks in advance<p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-26023203cant see row numbers in findbugs report2009-10-23T02:19:24Z2009-10-23T02:19:24Zplueschmuetzehey folks,
<br><br>i am using findbugs and hudson with hudson findbugs plugin. my problem is that i cant see the row number in the findbugs report. i can see the errors, warnings etc but not the row number where i can find the error, warning ... i am using findbugs on a jar file that i build in the following way:
<br><br><target name="BuildJar">
<br><jar destfile="${jarFile}"
<br>basedir="${build}"
<br>excludes="**/test.class"/>
<br><br>the thing that makes me wonder is that when i use findbugs on another jar that i didnt build on my own (in my case it was bcel.jar from apache) i can see the line numbers.... ?????
<br><br>can anybody help me?
<br><br>thx in advance!!!!
<br><p>From forum: <a href="http://old.nabble.com/FindBugs---General-f2572.html" embed="fixTarget[2572]" target="_top" >FindBugs - General</a></p>tag:old.nabble.com,2006:post-25871992OutofMemory FindBugs2009-10-13T05:30:29Z2009-10-13T05:30:29ZmontoyaHi
<br><br>When i ran this command
<br><br>D:\ReleaseTemp\trunk.nbs\target\checkout>mvn clean clover2:instrument clover2:aggregate clover2:clover site site:deploy -Dmaxmemory=1024m -P build-site,build-site-archive > "c:\NBSSiteBuild.log"
<br><br>altough i set maven's heap size to 1g by writing -Xmx1024m to mvn.bat, I've got this exception
<br><br>[INFO] Clover Version 2.5.1, built on May 28 2009 (build-758)
<br>[INFO] Loaded from: c:\dev\tools_data\maven_local_repo\com\cenqua\clover\clover\2.5.1\clover-2.5.1.jar
<br>[INFO] Clover: Evaluation License registered to Yapi Kredi Bankasi.
<br>[INFO] You have 8 day(s) before your license expires.
<br>[INFO] Loading coverage database from: 'D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\clover\clover.db'
<br>[WARNING] No coverage recordings found. No report will be generated.
<br>[INFO] Clover Version 2.5.1, built on May 28 2009 (build-758)
<br>[INFO] Loaded from: c:\dev\tools_data\maven_local_repo\com\cenqua\clover\clover\2.5.1\clover-2.5.1.jar
<br>[INFO] Clover: Evaluation License registered to Yapi Kredi Bankasi.
<br>[INFO] You have 8 day(s) before your license expires.
<br>[INFO] Clover is enabled with initstring 'D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\clover\clover.db'
<br>[WARNING] Clover historical directory [D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target/clover/history] does not exist, skipping Clover historical report generation ([D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\site\clover/clover.xml])
<br>[INFO] Clover Version 2.5.1, built on May 28 2009 (build-758)
<br>[INFO] Loaded from: c:\dev\tools_data\maven_local_repo\com\cenqua\clover\clover\2.5.1\clover-2.5.1.jar
<br>[INFO] Clover: Evaluation License registered to xxxxxx.
<br>[INFO] You have 8 day(s) before your license expires.
<br>[INFO] Loading coverage database from: 'D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\clover\clover.db'
<br>[WARNING] No coverage recordings found. No report will be generated.
<br>[INFO] Generating "JIRA Report" report.
<br>[ERROR] Unable to extract a JIRA pid from the page at the url <a href="http://falez10.kfs.local:8080/browse/OPENTAHSIS" target="_top" rel="nofollow">http://falez10.kfs.local:8080/browse/OPENTAHSIS</a><br>[ERROR] The issue management URL in the POM does not include a pid, and it was not possible to extract it from the page at that URL.
<br>[INFO] Generating "Checkstyle" report.
<br>[INFO] There are 81135 checkstyle errors.
<br>[INFO] Generating "Source Xref" report.
<br>[INFO] Generating "PMD Report" report.
<br>[INFO] Generating "CPD Report" report.
<br>[INFO] Generating "FindBugs Report" report.
<br>[INFO] Using source root:
<br>[INFO] D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\classes
<br>[INFO] Using test source root:
<br>[INFO] D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\target\test-classes
<br>[INFO] No effort provided, using default effort.
<br>[INFO] Adding Source Directory: D:\ReleaseTemp\trunk.nbs\target\checkout\texan-nbs-ui\src\main\java
<br>[INFO] No threshold provided, using default threshold.
<br>[INFO] Using FindBugs Version: 1.3.8
<br>[INFO] No threshold provided, using default threshold.
<br>[INFO] No threshold provided, using default threshold.
<br>[INFO] Debugging is Off
<br>[INFO] No bug include filter.
<br>[INFO] No bug exclude filter.
<br>[INFO] ------------------------------------------------------------------------
<br>[ERROR] FATAL ERROR
<br>[INFO] ------------------------------------------------------------------------
<br>[INFO] Java heap space
<br>[INFO] ------------------------------------------------------------------------
<br>[INFO] Trace
<br>java.lang.OutOfMemoryError: Java heap space
<br> at java.util.ArrayList.<init>(ArrayList.java:112)
<br> at java.util.ArrayList.<init>(ArrayList.java:119)
<br> at edu.umd.cs.findbugs.ba.vna.ValueNumberFrame.copyFrom(ValueNumberFrame.java:332)
<br> at edu.umd.cs.findbugs.ba.FrameDataflowAnalysis.mergeInto(FrameDataflowAnalysis.java:115)
<br> at edu.umd.cs.findbugs.ba.vna.ValueNumberAnalysis.mergeInto(ValueNumberAnalysis.java:203)
<br> at edu.umd.cs.findbugs.ba.vna.ValueNumberAnalysis.meetInto(ValueNumberAnalysis.java:197)
<br> at edu.umd.cs.findbugs.ba.vna.ValueNumberAnalysis.meetInto(ValueNumberAnalysis.java:55)
<br> at edu.umd.cs.findbugs.ba.Dataflow.execute(Dataflow.java:333)
<br> at edu.umd.cs.findbugs.classfile.engine.bcel.ValueNumberDataflowFactory.analyze(ValueNumberDataflowFactory.java:72)
<br> at edu.umd.cs.findbugs.classfile.engine.bcel.ValueNumberDataflowFactory.analyze(ValueNumberDataflowFactory.java:47)
<br> at edu.umd.cs.findbugs.classfile.impl.AnalysisCache.analyzeMethod(AnalysisCache.java:331)
<br> at edu.umd.cs.findbugs.classfile.impl.AnalysisCache.getMethodAnalysis(AnalysisCache.java:281)
<br> at edu.umd.cs.findbugs.classfile.engine.bcel.AnalysisFactory.getValueNumberDataflow(AnalysisFactory.java:108)
<br> at edu.umd.cs.findbugs.classfile.engine.bcel.LockDataflowFactory.analyze(LockDataflowFactory.java:55)
<br> at edu.umd.cs.findbugs.classfile.engine.bcel.LockDataflowFactory.analyze(LockDataflowFactory.java:39)
<br> at edu.umd.cs.findbugs.classfile.impl.AnalysisCache.analyzeMethod(AnalysisCache.java:331)
<br> at edu.umd.cs.findbugs.classfile.impl.AnalysisCache.getMethodAnalysis(AnalysisCache.java:281)
<br> at edu.umd.cs.findbugs.ba.ClassContext.getMethodAnalysis(ClassContext.java:937)
<br> at edu.umd.cs.findbugs.ba.ClassContext.getLockDataflow(ClassContext.java:534)
<br> at edu.umd.cs.findbugs.detect.StaticCalendarDetector.visitMethod(StaticCalendarDetector.java:180)
<br> at org.apache.bcel.classfile.Method.accept(Method.java:102)
<br> at edu.umd.cs.findbugs.visitclass.PreorderVisitor.doVisitMethod(PreorderVisitor.java:223)
<br> at edu.umd.cs.findbugs.visitclass.PreorderVisitor.visitJavaClass(PreorderVisitor.java:266)
<br> at org.apache.bcel.classfile.JavaClass.accept(JavaClass.java:276)
<br> at edu.umd.cs.findbugs.BytecodeScanningDetector.visitClassContext(BytecodeScanningDetector.java:36)
<br> at edu.umd.cs.findbugs.DetectorToDetector2Adapter.visitClass(DetectorToDetector2Adapter.java:68)
<br> at edu.umd.cs.findbugs.FindBugs2.analyzeApplication(FindBugs2.java:971)
<br> at edu.umd.cs.findbugs.FindBugs2.execute(FindBugs2.java:222)
<br> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
<br> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
<br> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
<br> at java.lang.reflect.Method.invoke(Method.java:597)
<br>[INFO] ------------------------------------------------------------------------
<br>[INFO] Total time: 412 minutes 27 seconds
<br>[INFO] Finished at: Tue Oct 13 14:55:23 EEST 2009
<br>[INFO] Final Memory: 125M/508M
<br>[INFO] ------------------------------------------------------------------------<p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25816109Help need to write custom rules2009-10-08T23:28:01Z2009-10-08T23:28:01ZGaurav Thakur-3<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:Z="urn:schemas-microsoft-com:" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hi All,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I`m trying to write some custom FindBugs rules.<o:p></o:p></p>
<p class=MsoNormal>I need some help as to figure out how to get the value as
highlighted below,<o:p></o:p></p>
<p class=MsoNormal>I`m able to get the correct OPCODE value in side the
sawopcode method but when I try to call the super class methods to get operand
or other information<o:p></o:p></p>
<p class=MsoNormal>I always get an exception “xxxmethod called but value not
available”;<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I need to get the value like the value being pushed on to
the stack using bipush or sipush.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Code::Code(max_stack = 2, max_locals = 2, code_length = 23)<o:p></o:p></p>
<p class=MsoNormal>0:
ldc
"AES" (3)<o:p></o:p></p>
<p class=MsoNormal>2:
invokestatic
javax.crypto.KeyGenerator.getInstance (Ljava/lang/String<o:p></o:p></p>
<p class=MsoNormal>;)Ljavax/crypto/KeyGenerator; (4)<o:p></o:p></p>
<p class=MsoNormal>5: astore_1<o:p></o:p></p>
<p class=MsoNormal>6: aload_1<o:p></o:p></p>
<p class=MsoNormal>7:
bipush <span style='color:red'>127 </span> <o:p></o:p></p>
<p class=MsoNormal>9: invokevirtual
javax.crypto.KeyGenerator.init (I)V (5)<o:p></o:p></p>
<p class=MsoNormal>12: aload_0<o:p></o:p></p>
<p class=MsoNormal>13:
getfield
com.symcor.pmd.test.KeyTooShort.k1 Ljavax/crypto/KeyGenerator; (2)<o:p></o:p></p>
<p class=MsoNormal>16:
sipush <span style='color:red'>128</span><o:p></o:p></p>
<p class=MsoNormal>19: invokevirtual
javax.crypto.KeyGenerator.init (I)V (5)<o:p></o:p></p>
<p class=MsoNormal>22: return<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Please help me out.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thanks & Regards<o:p></o:p></p>
<p class=MsoNormal>Gaurav Thakur<o:p></o:p></p>
</div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre>**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely
for the use of the addressee(s). If you are not the intended recipient, please
notify the sender by e-mail and delete the original message. Further, you are not
to copy, disclose, or distribute this e-mail or its contents to any other person and
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken
every reasonable precaution to minimize this risk, but is not liable for any damage
you may sustain as a result of any virus in this e-mail. You should carry out your
own virus checks before opening the e-mail or attachment. Infosys reserves the
right to monitor and review the content of all messages sent to or from this e-mail
address. Messages sent to or from this e-mail address may be stored on the
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***</pre></font></td></tr></table>
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25816109&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25816261Help need to write custom rules2009-10-08T23:26:48Z2009-10-08T23:26:48ZGaurav Thakur-3<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:Z="urn:schemas-microsoft-com:" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hi All,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I`m trying to write some custom FindBugs rules.<o:p></o:p></p>
<p class=MsoNormal>I need some help as to figure out how to get the value as
highlighted below,<o:p></o:p></p>
<p class=MsoNormal>I`m able to get the correct OPCODE value in side the
sawopcode method but when I try to call the super class methods to get operand
or other information<o:p></o:p></p>
<p class=MsoNormal>I always get an exception “xxxmethod called but value
not available”;<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I need to get the value like the value being pushed on to
the stack using bipush or sipush.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Code::Code(max_stack = 2, max_locals = 2, code_length = 23)<o:p></o:p></p>
<p class=MsoNormal>0: ldc
"AES" (3)<o:p></o:p></p>
<p class=MsoNormal>2:
invokestatic
javax.crypto.KeyGenerator.getInstance (Ljava/lang/String<o:p></o:p></p>
<p class=MsoNormal>;)Ljavax/crypto/KeyGenerator; (4)<o:p></o:p></p>
<p class=MsoNormal>5: astore_1<o:p></o:p></p>
<p class=MsoNormal>6: aload_1<o:p></o:p></p>
<p class=MsoNormal>7:
bipush <span style='color:red'>127 </span> <o:p></o:p></p>
<p class=MsoNormal>9: invokevirtual
javax.crypto.KeyGenerator.init (I)V (5)<o:p></o:p></p>
<p class=MsoNormal>12: aload_0<o:p></o:p></p>
<p class=MsoNormal>13:
getfield
com.symcor.pmd.test.KeyTooShort.k1 Ljavax/crypto/KeyGenerator; (2)<o:p></o:p></p>
<p class=MsoNormal>16:
sipush <span style='color:red'>128</span><o:p></o:p></p>
<p class=MsoNormal>19: invokevirtual
javax.crypto.KeyGenerator.init (I)V (5)<o:p></o:p></p>
<p class=MsoNormal>22: return<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Please help me out.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Thanks & Regards<o:p></o:p></p>
<p class=MsoNormal>Gaurav Thakur<o:p></o:p></p>
</div>
</body>
</html>
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25816261&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25795585Re: ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.82009-10-07T15:29:43Z2009-10-07T15:29:43ZDave Brosius-2<font face="arial" size="2">not that i am aware of.<br><br>-----Original Message-----<br>From: "Hafner Ullrich" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=0" target="_top" rel="nofollow">Ullrich.Hafner@...</a>><br>Sent: Wednesday, October 7, 2009 5:37pm<br>To: "Dave Brosius" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=1" target="_top" rel="nofollow">dbrosius@...</a>><br>Subject: RE: [FB-Discuss] ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.8<br><br>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta content="MSHTML 6.00.6000.16850" name="GENERATOR">
<div dir="ltr" align="left"><span class="477221721-07102009"><font color="#0000ff" size="2" face="Arial">Hmm, the API description says:</font></span></div>
<div dir="ltr" align="left"><span class="477221721-07102009"><font color="#0000ff" size="2" face="Arial"></font></span> </div>
<div dir="ltr" align="left"><span class="477221721-07102009"><font color="#0000ff" size="2" face="Arial">"Closing a connection instance that was obtained from a
pooled connection does not close the physical database connection. It does,
however, free the resources of the connection instance, clear the state, close
statement objects created from the connection instance, and restore the defaults
for the next connection instance that will be created."</font></span></div>
<div dir="ltr" align="left"><span class="477221721-07102009"><font color="#0000ff" size="2" face="Arial"></font></span> </div>
<div dir="ltr" align="left"><span class="477221721-07102009"><font color="#0000ff" size="2" face="Arial">Is there a way to configure findbugs to only find missing
close connection statements and not the other "missing" statements? I think it
makes sense to trust the JDBC driver developers, otherwise you will produce a
lot of redundant code:-) </font></span></div>
<div><font color="#0000ff" size="2" face="Arial"></font> </div>
<div><span class="477221721-07102009"></span><font face="Arial"><font color="#0000ff"><font size="2">U<span class="477221721-07102009">lli</span></font></font></font><br></div>
<blockquote style="border-left: 2px solid rgb(0, 0, 255); padding-left: 5px; margin-left: 5px; margin-right: 0px;">
<div class="OutlookMessageHeader" dir="ltr" align="left" lang="en-us">
<hr tabindex="-1">
<font size="2" face="Tahoma"><b>From:</b> Dave Brosius
[mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=2" target="_top" rel="nofollow">dbrosius@...</a>] <br><b>Sent:</b> Mittwoch, 7. Oktober 2009
17:49<br><b>To:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=3" target="_top" rel="nofollow">Findbugs-discuss@...</a><br><b>Cc:</b> Hafner
Ullrich<br><b>Subject:</b> RE: [FB-Discuss] ODR_OPEN_DATABASE_RESOURCE in
findbugs 1.3.8<br></font><br></div>
<div></div><font size="2" face="arial">This is true if the connection is a raw
connection, however it's possible that the connection came from a pool, in
which case close doesn't close a connection, it just allows the pool to reuse
it. So in this case you do want to close all the statements as well. And i'd
go further to say, you probably should close them yourself in all cases
anyway, as you don't know for sure that the driver you use tomorrow will do
the right thing.<br><br>-----Original Message-----<br>From: "Hafner Ullrich"
<<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=4" target="_top" rel="nofollow">Ullrich.Hafner@...</a>><br>Sent: Wednesday, October 7, 2009
10:56am<br>To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=5" target="_top" rel="nofollow">Findbugs-discuss@...</a><br>Subject: [FB-Discuss]
ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.8<br><br>Hi,<br><br>I have a
question about the detector ODR_OPEN_DATABASE_RESOURCE in<br>findbugs 1.3.8.
In the following snipped the detector creates a warning<br>with the message
that the statement on line 97 is not closed. However,<br>the JDBC API defines
that if a connection is closed than the connection<br>object should also close
the associated statements. Shouldn't the<br>detector be adjusted to handle
that case?<br><br>094 try {<br>095 connection = connect();<br>096 <br>097
CallableStatement statement =<br>connection.prepareCall(query);<br>098
statement.execute();<br>099 }<br>100 catch (SQLException exception) {<br>101
throw new DatabaseException(exception);<br>102 }<br>103 finally {<br>104
close(connection);<br>105
}<br><br>Ulli<br><br>_______________________________________________<br>Findbugs-discuss
mailing
list<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=6" target="_top" rel="nofollow">Findbugs-discuss@...</a><br>https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss<br></font></blockquote><font size="2" face="arial"></font></font><br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25795585&i=7" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25789350Re: ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.82009-10-07T08:49:10Z2009-10-07T08:49:10ZDave Brosius-2<font face="arial" size="2">This is true if the connection is a raw connection, however it's possible that the connection came from a pool, in which case close doesn't close a connection, it just allows the pool to reuse it. So in this case you do want to close all the statements as well. And i'd go further to say, you probably should close them yourself in all cases anyway, as you don't know for sure that the driver you use tomorrow will do the right thing.<br><br>-----Original Message-----<br>From: "Hafner Ullrich" <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25789350&i=0" target="_top" rel="nofollow">Ullrich.Hafner@...</a>><br>Sent: Wednesday, October 7, 2009 10:56am<br>To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25789350&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a><br>Subject: [FB-Discuss] ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.8<br><br>Hi,<br><br>I have a question about the detector ODR_OPEN_DATABASE_RESOURCE in<br>findbugs 1.3.8. In the following snipped the detector creates a warning<br>with the message that the statement on line 97 is not closed. However,<br>the JDBC API defines that if a connection is closed than the connection<br>object should also close the associated statements. Shouldn't the<br>detector be adjusted to handle that case?<br><br>094 try {<br>095 connection = connect();<br>096 <br>097 CallableStatement statement =<br>connection.prepareCall(query);<br>098 statement.execute();<br>099 }<br>100 catch (SQLException exception) {<br>101 throw new DatabaseException(exception);<br>102 }<br>103 finally {<br>104 close(connection);<br>105 }<br><br>Ulli<br><br>_______________________________________________<br>Findbugs-discuss mailing list<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25789350&i=2" target="_top" rel="nofollow">Findbugs-discuss@...</a><br>https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss<br></font><br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25789350&i=3" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25788419ODR_OPEN_DATABASE_RESOURCE in findbugs 1.3.82009-10-07T07:56:02Z2009-10-07T07:56:02ZUlli HafnerHi,
<br><br>I have a question about the detector ODR_OPEN_DATABASE_RESOURCE in
<br>findbugs 1.3.8. In the following snipped the detector creates a warning
<br>with the message that the statement on line 97 is not closed. However,
<br>the JDBC API defines that if a connection is closed than the connection
<br>object should also close the associated statements. Shouldn't the
<br>detector be adjusted to handle that case?
<br><br>094 try {
<br>095 connection = connect();
<br>096
<br>097 CallableStatement statement =
<br>connection.prepareCall(query);
<br>098 statement.execute();
<br>099 }
<br>100 catch (SQLException exception) {
<br>101 throw new DatabaseException(exception);
<br>102 }
<br>103 finally {
<br>104 close(connection);
<br>105 }
<br><br>Ulli
<br><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25788419&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25685351NoSuchFieldError, AbstractMethodError, VerifyError missing2009-09-30T10:13:08Z2009-09-30T10:13:08ZWes MunsilFindBugs 1.3.9, Java version 1.6.0_15 on Windows, project with about
<br>5,000 classes.
<br><br>Have you seen the below message, or know what might be causing it? Thanks.
<br><br>The following classes needed for analysis were missing:
<br> java.lang.NoSuchFieldError
<br> java.lang.AbstractMethodError
<br> java.lang.VerifyError
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25685351&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25652843SBSC: Method concatenates strings using + in a loop2009-09-28T13:52:03Z2009-09-28T13:52:03Zgardner_art<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:Z="urn:schemas-microsoft-com:" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>My guess would be that we don’t want to flag the “Method
concatenates strings using + in a loop” condition, if the string is
always intialized in the loop, as well?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>The following was flagged in 1.3.9.20090821:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal> while
(all.hasNext()) {<o:p></o:p></p>
<p class=MsoNormal> Map.Entry
entry = (Map.Entry) all.next();<o:p></o:p></p>
<p class=MsoNormal> String
key = (String) entry.getKey();<o:p></o:p></p>
<p class=MsoNormal> if
(!usedObjects.containsKey(key)) {<o:p></o:p></p>
<p class=MsoNormal> Content
cont = (Content) entry.getValue();<o:p></o:p></p>
<p class=MsoNormal> String
msg = key + "\t" + cont.getName();<o:p></o:p></p>
<p class=MsoNormal> if
(!versioning)<o:p></o:p></p>
<p class=MsoNormal> msg
+= " " + cont.getVersion();<o:p></o:p></p>
<p class=MsoNormal> msg
+= "\t";<o:p></o:p></p>
<p class=MsoNormal> if
(!cont.getDocumentName().equals(masterDoc))<o:p></o:p></p>
<p class=MsoNormal>>>> msg
+= cont.getDocumentName();<o:p></o:p></p>
<p class=MsoNormal> sw.logUnused(msg);<o:p></o:p></p>
<p class=MsoNormal> }<o:p></o:p></p>
<p class=MsoNormal> }<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Art<o:p></o:p></p>
</div>
</body>
</html>
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25652843&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25640241Re: Findbugs Maven 2 plugin problem2009-09-27T20:30:49Z2009-09-27T20:30:49ZBill ShannonI changed the version in the pom.xml to 2.0.1. It made no difference.
<br><br>You should be able to reproduce this easily using GlassFish, but let
<br>me know if you need any help with that.
<br><br>Garvin LeClaire wrote on 9/27/09 7:12 PM:
<div class='shrinkable-quote'><br>> Bill,
<br>>
<br>> The current version of the plugin is 2.0.1, The 2.1 version is a
<br>> byproducts of a bug in the release plugin. Unfortunately there is not
<br>> any way to remove from the repositories.
<br>> Hopefully I will get a 2.2 release out in the next couple of weeks once
<br>> I address a bug in FindBugs I found.
<br>>
<br>> Try the 2.0.1 version and see what your results you get.
<br>>
<br>> I will set up a test case similar to yours and see if I can reproduce
<br>> the problem.
<br>>
<br>>
<br>> Regards,
<br>>
<br>> Garvin LeClaire
<br>> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25640241&i=0" target="_top" rel="nofollow">garvin.leclaire@...</a>
<br>>
<br>>
<br>>
<br>> On Sep 24, 2009, at 6:37 PM, Bill Shannon wrote:
<br>>
<br>>> I'm using the FindBugs Maven 2 plugin v2.1 to run FindBugs against
<br>>> GlassFish
<br>>> (<a href="https://glassfish.dev.java.net/" target="_top" rel="nofollow">https://glassfish.dev.java.net/</a>). GlassFish has many modules and
<br>>> submodules.
<br>>> I've configured FindBugs in the top level pom.xml and then specified
<br>>> exclude
<br>>> files in some of the lower level modules that need them.
<br>>>
<br>>> I have one case of a sub-sub-module that seems to be ignoring the exclude
<br>>> file, or rather, ignoring the contents of the exclude file.
<br>>>
<br>>> If I run "mvn findbugs:findbugs" in the security/core module, I get the
<br>>> expected results.
<br>>>
<br>>> If I run "mvn findbugs:findbugs" in the security module, which also
<br>>> causes
<br>>> it to run on the security/core module, I get the expected results.
<br>>>
<br>>> But if I run "mvn findbugs:findbugs" on the top level module, the results
<br>>> are as if the exclude file is being ignored. It *says* it's using an
<br>>> exclude file (copied to some temporary location for some reason), but
<br>>> it's still reporting bugs that should be excluded.
<br>>>
<br>>> Can anyone suggest anything I might be doing wrong?
<br>>>
<br>>> I can provide lots more details to anyone who can help me debug this.
<br>>>
<br>>> You can find the code via svn here:
<br>>> <a href="https://svn.dev.java.net/svn/glassfish-svn/trunk/v3" target="_top" rel="nofollow">https://svn.dev.java.net/svn/glassfish-svn/trunk/v3</a><br>>> or browse it here:
<br>>> <a href="http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3" target="_top" rel="nofollow">http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3</a><br>>>
<br>>>
<br>>> I tried to use the 2.2-SNAPSHOT version of the FindBugs plugin, but in
<br>>> general we don't want to use SNAPSHOT versions of things in the GlassFish
<br>>> build and apparently I don't understand enough about maven to figure out
<br>>> how to make it use it anyway. :-(
<br>>>
<br>>> Thanks for any help!
<br>>>
<br>>> FYI, you can find the report here:
<br>>>
<br>>> <a href="http://hudson.glassfish.org/job/gf-trunk-findbugs/" target="_top" rel="nofollow">http://hudson.glassfish.org/job/gf-trunk-findbugs/</a><br>>> _______________________________________________
<br>>> Findbugs-discuss mailing list
<br>>> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25640241&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br>>> <a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br>>
</div><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25640241&i=2" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25639807Re: Findbugs Maven 2 plugin problem2009-09-27T19:12:24Z2009-09-27T19:12:24ZGarvin LeClaire-2Bill,
<br><br>The current version of the plugin is 2.0.1, The 2.1 version is a
<br>byproducts of a bug in the release plugin. Unfortunately there is not
<br>any way to remove from the repositories.
<br>Hopefully I will get a 2.2 release out in the next couple of weeks
<br>once I address a bug in FindBugs I found.
<br><br>Try the 2.0.1 version and see what your results you get.
<br><br>I will set up a test case similar to yours and see if I can reproduce
<br>the problem.
<br><br><br>Regards,
<br><br>Garvin LeClaire
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25639807&i=0" target="_top" rel="nofollow">garvin.leclaire@...</a>
<br><br><br><br>On Sep 24, 2009, at 6:37 PM, Bill Shannon wrote:
<br><div class='shrinkable-quote'><br>> I'm using the FindBugs Maven 2 plugin v2.1 to run FindBugs against
<br>> GlassFish
<br>> (<a href="https://glassfish.dev.java.net/" target="_top" rel="nofollow">https://glassfish.dev.java.net/</a>). GlassFish has many modules and
<br>> submodules.
<br>> I've configured FindBugs in the top level pom.xml and then specified
<br>> exclude
<br>> files in some of the lower level modules that need them.
<br>>
<br>> I have one case of a sub-sub-module that seems to be ignoring the
<br>> exclude
<br>> file, or rather, ignoring the contents of the exclude file.
<br>>
<br>> If I run "mvn findbugs:findbugs" in the security/core module, I get
<br>> the
<br>> expected results.
<br>>
<br>> If I run "mvn findbugs:findbugs" in the security module, which also
<br>> causes
<br>> it to run on the security/core module, I get the expected results.
<br>>
<br>> But if I run "mvn findbugs:findbugs" on the top level module, the
<br>> results
<br>> are as if the exclude file is being ignored. It *says* it's using an
<br>> exclude file (copied to some temporary location for some reason), but
<br>> it's still reporting bugs that should be excluded.
<br>>
<br>> Can anyone suggest anything I might be doing wrong?
<br>>
<br>> I can provide lots more details to anyone who can help me debug this.
<br>>
<br>> You can find the code via svn here:
<br>> <a href="https://svn.dev.java.net/svn/glassfish-svn/trunk/v3" target="_top" rel="nofollow">https://svn.dev.java.net/svn/glassfish-svn/trunk/v3</a><br>> or browse it here:
<br>> <a href="http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3" target="_top" rel="nofollow">http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3</a><br>>
<br>>
<br>> I tried to use the 2.2-SNAPSHOT version of the FindBugs plugin, but in
<br>> general we don't want to use SNAPSHOT versions of things in the
<br>> GlassFish
<br>> build and apparently I don't understand enough about maven to figure
<br>> out
<br>> how to make it use it anyway. :-(
<br>>
<br>> Thanks for any help!
<br>>
<br>> FYI, you can find the report here:
<br>>
<br>> <a href="http://hudson.glassfish.org/job/gf-trunk-findbugs/" target="_top" rel="nofollow">http://hudson.glassfish.org/job/gf-trunk-findbugs/</a><br>> _______________________________________________
<br>> Findbugs-discuss mailing list
<br>> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25639807&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br>> <a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a></div><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25639807&i=2" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25603869Findbugs Maven 2 plugin problem2009-09-24T15:37:05Z2009-09-24T15:37:05ZBill ShannonI'm using the FindBugs Maven 2 plugin v2.1 to run FindBugs against GlassFish
<br>(<a href="https://glassfish.dev.java.net/" target="_top" rel="nofollow">https://glassfish.dev.java.net/</a>). GlassFish has many modules and submodules.
<br>I've configured FindBugs in the top level pom.xml and then specified exclude
<br>files in some of the lower level modules that need them.
<br><br>I have one case of a sub-sub-module that seems to be ignoring the exclude
<br>file, or rather, ignoring the contents of the exclude file.
<br><br>If I run "mvn findbugs:findbugs" in the security/core module, I get the
<br>expected results.
<br><br>If I run "mvn findbugs:findbugs" in the security module, which also causes
<br>it to run on the security/core module, I get the expected results.
<br><br>But if I run "mvn findbugs:findbugs" on the top level module, the results
<br>are as if the exclude file is being ignored. It *says* it's using an
<br>exclude file (copied to some temporary location for some reason), but
<br>it's still reporting bugs that should be excluded.
<br><br>Can anyone suggest anything I might be doing wrong?
<br><br>I can provide lots more details to anyone who can help me debug this.
<br><br>You can find the code via svn here:
<br><a href="https://svn.dev.java.net/svn/glassfish-svn/trunk/v3" target="_top" rel="nofollow">https://svn.dev.java.net/svn/glassfish-svn/trunk/v3</a><br>or browse it here:
<br><a href="http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3" target="_top" rel="nofollow">http://fisheye4.atlassian.com/browse/glassfish-svn/trunk/v3</a><br><br><br>I tried to use the 2.2-SNAPSHOT version of the FindBugs plugin, but in
<br>general we don't want to use SNAPSHOT versions of things in the GlassFish
<br>build and apparently I don't understand enough about maven to figure out
<br>how to make it use it anyway. :-(
<br><br>Thanks for any help!
<br><br>FYI, you can find the report here:
<br><br><a href="http://hudson.glassfish.org/job/gf-trunk-findbugs/" target="_top" rel="nofollow">http://hudson.glassfish.org/job/gf-trunk-findbugs/</a><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25603869&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25546040Re: Why mysql-connector-java?2009-09-21T08:33:06Z2009-09-21T08:33:06ZJerry James-3On Mon, Aug 24, 2009 at 4:54 PM, Jerry James <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25546040&i=0" target="_top" rel="nofollow">loganjerry@...</a>> wrote:
<br>> I'm the findbugs package maintainer for Fedora. I'm working on
<br>> putting the 1.3.9 update together. Why has
<br>> mysql-connector-java-5.1.7-bin.jar been added to the lib subdirectory?
<br>> I can't find anything that uses it. Thanks,
<br><br>One month later, I still need an answer to this question.
<br>--
<br>Jerry James
<br><a href="http://www.jamezone.org/" target="_top" rel="nofollow">http://www.jamezone.org/</a><br><br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25546040&i=1" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25545059FL_MATH_USING_FLOAT_PRECISION2009-09-21T07:33:38Z2009-09-21T07:33:38ZTobias van TreeckRecently findbugs reported the following bug in my code:<br><br>FL_MATH_USING_FLOAT_PRECISION<br><p>The method performs math operations using floating point precision. Floating
point precision is very imprecise. For example, 16777216.0f + 1.0f =
16777216.0f. Consider using double math instead.</p><br>In
some other project i remembered that bug but didn't remember which
project it was, so i searched the online bug descriptions.<br>However i couldn't find the bug description there:<br>
<a href="http://findbugs.sourceforge.net/bugDescriptions.html" target="_blank" rel="nofollow">http://findbugs.sourceforge.net/bugDescriptions.html</a><br><br>Has it been forgotten?<br>Regards,<br>ToM
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25545059&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25500053JLM_JSR166_UTILCONCURRENT_MONITORENTER2009-09-17T15:02:36Z2009-09-17T15:02:36Zhhale21Just upgraded to 1.3.9 and findbugs reports JLM_JSR166_UTILCONCURRENT_MONITORENTER. I googled for a description with no hits.
<br><br><br>
<br>_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25500053&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>tag:old.nabble.com,2006:post-25473762FL_MATH_USING_FLOAT_PRECISION2009-09-16T07:16:09Z2009-09-16T07:16:09ZTobias van TreeckRecently findbugs reported the following bug in my code:<br><br>FL_MATH_USING_FLOAT_PRECISION<br><p>The method performs math operations using floating point precision. Floating
point precision is very imprecise. For example, 16777216.0f + 1.0f =
16777216.0f. Consider using double math instead.</p><br>In some other project i remembered that bug but didn't remember which project it was, so i searched the online bug descriptions.<br>However i couldn't find the bug description there:<br>
<a href="http://findbugs.sourceforge.net/bugDescriptions.html" target="_top" rel="nofollow">http://findbugs.sourceforge.net/bugDescriptions.html</a><br><br>Has it been forgotten?<br>Regards,<br>ToM<br>
<br />_______________________________________________
<br>Findbugs-discuss mailing list
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=25473762&i=0" target="_top" rel="nofollow">Findbugs-discuss@...</a>
<br><a href="https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss" target="_top" rel="nofollow">https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss</a><br><p>From forum: <a href="http://old.nabble.com/findbugs-discuss-f15313.html" embed="fixTarget[15313]" target="_top" >findbugs-discuss</a></p>