Teste

Evaluation of FindBugs
The static analysis tool that finds bugs
Square Root 4/8/2009

Square Root Analysis: A10

Overview of FindBugs
FindBugs is an open source program which employs static analysis to indentify a multitude of potential errors in Java programs. The unique nature of this tool is that performs its analysis on byte code, rather than source code. Its installation and use will be explored in subsequent sections of this paper. FindBugs can detect the bug patterns shown in the following table. Description AM: Creates an empty jar file entry AM: Creates an empty zip file entry BC: Equals method should not assume anything about the type of its argument BC: Random object created and used only once BIT: Check for sign of bitwise operation CN: Class implements Cloneable but does not define or use clone method CN: clone method does not call super.clone() CN: Class defines clone() but doesn't implement Cloneable Co: Abstract class defines covariant compareTo() method Co: Covariant compareTo() method defined DE: Method might drop exception DE: Method might ignore exception DP: Classloaders should only be created inside doPrivileged block DP: Method invoked that should be only be invoked inside a doPrivileged block Dm: Method invokes System.exit(...)

Application of FindBugs
FindBugs is a tool that is available for utilization in two flavors: • Standalone application • Eclipse plug-in Since anything but the simplest projects can quickly overwhelm developers of an organization, and because Eclipse was also being utilized for the development of our Studio project, it was quite apparent that our proclivity would be towards exploration of the Eclipse plug-in rather than use of the tool as a standalone application. Following is an exposition of the steps required for the installation of the tool: • The plug-in was available from the site: http://findbugs.cs.umd.edu/eclipse. Installation of the tool requires the following sequential operations: o Select the