Feedback wanted: new open stream/database resource detector

View: New views
2 Messages — Rating Filter:   Alert me  

Feedback wanted: new open stream/database resource detector

by David Hovemeyer-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Howdy folks,

I have been working on a new detector to find open streams and
database resources (to replace the existing FindOpenStream detector).
It has now reached the point where it is ready for testing.

So, if you are interested, please give it a try:

  http://faculty.ycp.edu/~dhovemey/findbugs-1.3.5-dev-20080721.zip

The bug pattern reported is "OBL_UNSATISFIED_OBLIGATION",
and is in a detector called FindUnsatisfiedObligation.
We would like to know

- does this detector catch interesting issues?
- are there a lot of false positives?
- does the detector ever hang or crash findbugs?

The false-positive suppression heuristics have not been tuned
extensively.  In particular, the detector does not (generally) assume that if a
stream or resource is passed to another method that the called
method will close the resource.  If this is a major source of
false positives, we would like to know.

In case you're interested, the analysis technique on which the
detector is based is described in a paper by Wes Weimer and
George Necula:

  http://www.cs.virginia.edu/~weimer/p/p419-weimer.pdf

-Dave
_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

Re: Feedback wanted: new open stream/database resource detector

by Noel Grandin-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Sounds like it could do with integration with the @WillClose,
@WillNotClose annotations from JSR-305
http://code.google.com/p/jsr-305/

On Mon, Jul 21, 2008 at 22:34, David Hovemeyer
<david.hovemeyer@...> wrote:

> Howdy folks,
>
> I have been working on a new detector to find open streams and
> database resources (to replace the existing FindOpenStream detector).
> It has now reached the point where it is ready for testing.
>
> So, if you are interested, please give it a try:
>
>  http://faculty.ycp.edu/~dhovemey/findbugs-1.3.5-dev-20080721.zip
>
> The bug pattern reported is "OBL_UNSATISFIED_OBLIGATION",
> and is in a detector called FindUnsatisfiedObligation.
> We would like to know
>
> - does this detector catch interesting issues?
> - are there a lot of false positives?
> - does the detector ever hang or crash findbugs?
>
> The false-positive suppression heuristics have not been tuned
> extensively.  In particular, the detector does not (generally) assume that if a
> stream or resource is passed to another method that the called
> method will close the resource.  If this is a major source of
> false positives, we would like to know.
>
> In case you're interested, the analysis technique on which the
> detector is based is described in a paper by Wes Weimer and
> George Necula:
>
>  http://www.cs.virginia.edu/~weimer/p/p419-weimer.pdf
>
> -Dave
> _______________________________________________
> Findbugs-discuss mailing list
> Findbugs-discuss@...
> https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss
>
_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss
LightInTheBox - Buy quality products at wholesale price