Summary: This document provides information about changes and new features introduced in this release.
CAST AIP Service Packs 8.3.20 - 8.3.23 are compatible only with the latest releases of the JEE Analyzer extension, i.e. 1.0.28 and 1.2.10-funcrel. Using older releases of the extension with these CAST AIP Service Packs risks incomplete analysis results (missing objects, links, violations, erroneous FP values) for JEE and C++ analyses.
Therefore, when using CAST AIP Service Packs 8.3.20 - 8.3.23, please either:
- Upgrade your JEE extension to a compatible release (i.e. ≥ 1.0.28 or ≥ 1.2.10-funcrel) OR
- Upgrade CAST AIP to a more recent Service Pack (≥ 8.3.24) which are compatible with older releases of the JEE Analyzer extension
If upgrading the JEE Analyzer extension or CAST AIP is not possible, please contact CAST Technical Support.
New features
New Environment Profiles for Logging Frameworks and other features
New Environment Profiles have been added to the JEE analyzer extension to:
- reduce the number of links reported by the Dynamic Link Manager i.e. preventing (through parametrization) links from being created towards database objects whose names are found in an argument's string
- allow the creation (through parametrization) of the correct Use link between Java objects and database objects for Applications that use the the Spring IoC framework simpleJdbcTemplate methods Note that Applications can use both the JdbcTemplate and simpleJdbcTemplate classes.
- reduce the number of warning messages in the analysis log related to annotations (these annotations will be ignored - this will have no impact on analysis results)
In CAST AIP 8.3.2, these new Environment Profiles are not active by default, therefore you will need to add them yourself as custom Environment Profiles as follows:
- In the CAST Management Studio, navigate to the Analysis tab at Application or Analysis Unit level
- Scroll down to the Frameworks section
- Click the Add button in the Custom J2EE Environment Profiles section and choose Add from the sub menu:
- Choose the new Environment Profile you would like to add - you can choose multiple Environment Profiles - and click the OK button:
- The Environment Profile will be listed in the Custom J2EE Environment Profiles section and will be taken into account during the analysis.
Note that in a future release of the JEE analyzer extension, all these new Environment Profiles will be active by default and there will be no need to add them as custom JEE environment profiles.
List of new Environment Profiles
- Bean Validation API
- EasyMock
- Guava 18.0 add-on
- Jackson 2.0 add-on
- JAX-WS
- JAXB
- jBehave
- JSE org.w3c.dom
- JUnit annotations to ignore
- Logger Log4j 2
- Logger Apache commons logging
- Logger ATG
- Logger Avalon Escalibur
- Logger Camel
- Logger Eclipse
- Logger java.util.logging
- Logger JBOSS
- Logger JBOSS Seam 2.2.2
- Logger jnlp
- Logger Krysalis
- Logger Monolog
- Logger SLF4J
- Logger Spring
- Logger Owasp
- Logger Plexus
- Logger Mortbay
- Logger Weblogic
- Logger xwork2
- Lombok
- MeltingPot
- Mokito
- PowerMock
- Spring Boot add-on
- Spring Framework 3.x add-on
- Spring Security add-on
- TestNG
- Unit Test Unitils
- XStream
Bug Fix List
The following bugs have been fixed in this release of the JEE Analyzer extension:
Internal ID | Call ID | Summary |
|---|---|---|
| JFAMILY-610 | JEE Analysis takes too long due to too much time spent dealing with supposedly ignored XML files | |
| JFAMILY-597 | Missing Links for method passed in a lambda expression inside foreach | |
| JFAMILY-619 | "Unable to process JEE analysis" error occuring on every Analysis Unit | |
| JFAMILY-615 | Unable to process JEE analysis fatal error when specific JAR files are in the classpath |
