You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ant.apache.org by Ja...@rzf.fin-nrw.de on 2008/09/30 09:35:58 UTC

FYI: Ant listed as "defect free"

Fortify has listed Ant on https://opensource.fortify.com/ as "defect
free".

Jan

AW: FYI: Ant listed as "defect free"

Posted by Ja...@rzf.fin-nrw.de.
>Maybe the 'old path' is the better one ATM.
>I could use a
>    <fail unless="findbugs.home" message="You must specify
>'findbugs.home' to the install location of Findbugs"/>
>for ensure that the user had done that. (Maybe I was happy about the
>success with Ivy+Checkstyle ...)


As Xavier does an "init-ivy" if implemented an "init-findbugs": download
Findbugs and set its home.


>>> - FB run throws errors I dont understand
>>> 
>>> [fb:findbugs] Running FindBugs...  [fb:findbugs] Warning: could not
>>> load plugin -sortByClass
>>
>>I think it may choke on the empty plugin list, which may make FindBugs
>>misinterpret the -sortByClass option as the name of a plugin.
>
>
>Maybe. But I couldnt find a place with documentation about what to
>specify there.


Works now.


Jan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


AW: FYI: Ant listed as "defect free"

Posted by Ja...@rzf.fin-nrw.de.
>> - downloading Findbugs works - but only for an old version (1.0.0
>> instead of 1.3.5)
>
>downloading via Ivy you mean?  When I was younger, we simply went to
>the project's download page and manually added the jars to the
>directories we wanted them to live in.  I've been told that still
>works. ;-) [I won't tell you what we did when I was young]
>
>Seriously, I think you can expect anybody who wants to run findbugs to
>walk the extra mile and install it if necessary.  If you can make that
>even smoother, power to you.

Maybe the 'old path' is the better one ATM.
I could use a
    <fail unless="findbugs.home" message="You must specify
'findbugs.home' to the install location of Findbugs"/>
for ensure that the user had done that. (Maybe I was happy about the
success with Ivy+Checkstyle ...)



>> - FB run throws errors I dont understand
>> 
>> [fb:findbugs] Running FindBugs...  [fb:findbugs] Warning: could not
>> load plugin -sortByClass
>
>I think it may choke on the empty plugin list, which may make FindBugs
>misinterpret the -sortByClass option as the name of a plugin.


Maybe. But I couldnt find a place with documentation about what to
specify there.


Jan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Re: FYI: Ant listed as "defect free"

Posted by Stefan Bodewig <bo...@apache.org>.
On Wed, 8 Oct 2008, Jan Materne <Ja...@rzf.fin-nrw.de> wrote:

> Yes. But it is not so important what other say if you cant recheck
> it (IMHO).

Agreed.

> So I tried to set up a Findbug run in check.xml.

+1

> But I got a problem:
>
> - downloading Findbugs works - but only for an old version (1.0.0
> instead of 1.3.5)

downloading via Ivy you mean?  When I was younger, we simply went to
the project's download page and manually added the jars to the
directories we wanted them to live in.  I've been told that still
works. ;-) [I won't tell you what we did when I was young]

Seriously, I think you can expect anybody who wants to run findbugs to
walk the extra mile and install it if necessary.  If you can make that
even smoother, power to you.

> - FB run throws errors I dont understand
> 
> [fb:findbugs] Running FindBugs...  [fb:findbugs] Warning: could not
> load plugin -sortByClass

I think it may choke on the empty plugin list, which may make FindBugs
misinterpret the -sortByClass option as the name of a plugin.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


AW: FYI: Ant listed as "defect free"

Posted by Ja...@rzf.fin-nrw.de.
Yes. But it is not so important what other say if you cant recheck it (IMHO).
So I tried to set up a Findbug run in check.xml.
But I got a problem:
- downloading Findbugs works - but only for an old version (1.0.0 instead of 1.3.5) 
- FB run throws errors I dont understand

[fb:findbugs] Running FindBugs...
[fb:findbugs] Warning: could not load plugin -sortByClass: java.security.PrivilegedActionException: 
              edu.umd.cs.findbugs.PluginException: Couldn't find "findbugs.xml" in plugin
[fb:findbugs] The following errors occurred during analysis:
[fb:findbugs]   Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\access-bridge.jar to classpath
[fb:findbugs]     java.io.IOException: Could not open archive file C:\WINNT\Sun\Java\lib\ext\access-bridge.jar
[fb:findbugs]       At edu.umd.cs.findbugs.ba.URLClassPath$LocalArchiveEntry.<init>(URLClassPath.java:88)
[fb:findbugs]       At edu.umd.cs.findbugs.ba.URLClassPath.addURL(URLClassPath.java:280)
[fb:findbugs]       At edu.umd.cs.findbugs.ba.URLClassPathRepository.addURL(URLClassPathRepository.java:80)
[fb:findbugs]       At edu.umd.cs.findbugs.ba.AnalysisContext.addClasspathEntry(AnalysisContext.java:236)
[fb:findbugs]       At edu.umd.cs.findbugs.FindBugs.setRepositoryClassPath(FindBugs.java:1401)
[fb:findbugs]       At edu.umd.cs.findbugs.FindBugs.execute(FindBugs.java:1170)
[fb:findbugs]       At edu.umd.cs.findbugs.FindBugs.runMain(FindBugs.java:1897)
...
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\dnsns.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\jaccess-examples.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\jaccess.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\localedata.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\QTJava.zip to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\sunjce_provider.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\sunmscapi.jar to classpath
Warning: could not add URL C:\WINNT\Sun\Java\lib\ext\sunpkcs11.jar to classpath

The directory C:\WINNT\Sun\Java exists, but has only a subdir "Deployment".


Jan


>-----Ursprüngliche Nachricht-----
>Von: Stefan Bodewig [mailto:bodewig@apache.org] 
>Gesendet: Dienstag, 7. Oktober 2008 10:51
>An: dev@ant.apache.org
>Betreff: Re: FYI: Ant listed as "defect free"
>
>On Tue, 7 Oct 2008, Jan Materne <Ja...@rzf.fin-nrw.de> wrote:
>
>> 1. Maybe they have a different meaning what a "defect" is.
>
>Of course.
>
>But they also say they'd use FindBugs and IIRC there was a user
>submitting his FindBugs results a month or two ago and the list was
>not empty.
>
>Stefan
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
>For additional commands, e-mail: dev-help@ant.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Re: FYI: Ant listed as "defect free"

Posted by Stefan Bodewig <bo...@apache.org>.
On Tue, 7 Oct 2008, Jan Materne <Ja...@rzf.fin-nrw.de> wrote:

> 1. Maybe they have a different meaning what a "defect" is.

Of course.

But they also say they'd use FindBugs and IIRC there was a user
submitting his FindBugs results a month or two ago and the list was
not empty.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


AW: FYI: Ant listed as "defect free"

Posted by Ja...@rzf.fin-nrw.de.
1. Maybe they have a different meaning what a "defect" is.
2. They havent checked the codebase a long time ago 
...

>-----Ursprüngliche Nachricht-----
>Von: Stefan Bodewig [mailto:bodewig@apache.org] 
>Gesendet: Montag, 6. Oktober 2008 11:04
>An: dev@ant.apache.org
>Betreff: Re: FYI: Ant listed as "defect free"
>
>On Tue, 30 Sep 2008, Jan Materne <Ja...@rzf.fin-nrw.de> wrote:
>
>> Fortify has listed Ant on https://opensource.fortify.com/ as "defect
>> free".
>
><https://issues.apache.org/bugzilla/buglist.cgi?query_format=ad
vanced&short_desc_type=allwordssubstr&short_desc=&product=Ant&long_desc_type=substring&long_desc=&bug_file_loc_type=allwo>rdssubstr&bug_file_loc=&keywords_type=allwords&keywords=&bug_st
>atus=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_
>to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailrep
>orter2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=incl
ude&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&field0-0-0=noop&type0-0-0=noop&value0-0-0=>
>
>seems to disagree (and I trust that link more ;-).
>
>Stefan
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
>For additional commands, e-mail: dev-help@ant.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Re: FYI: Ant listed as "defect free"

Posted by Stefan Bodewig <bo...@apache.org>.
On Tue, 30 Sep 2008, Jan Materne <Ja...@rzf.fin-nrw.de> wrote:

> Fortify has listed Ant on https://opensource.fortify.com/ as "defect
> free".

<https://issues.apache.org/bugzilla/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=Ant&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&keywords_type=allwords&keywords=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&field0-0-0=noop&type0-0-0=noop&value0-0-0=>

seems to disagree (and I trust that link more ;-).

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org