Re: Coverity static analysis scanning

2014-09-10 Thread Olivier Lamy
I tried to get this working but got this error: https://analysis.apache.org/jenkins/job/tomcat-trunk/10/console Any help will be appreciate :-) On 3 September 2014 22:07, Fabrice Bellingard wrote: > Hi guys, > > Tomcat had also been analyzed for a couple of months on the SonarQube > instance of

Re: Coverity static analysis scanning

2014-09-10 Thread Mark Thomas
On 10/09/2014 08:08, Olivier Lamy wrote: > I tried to get this working but got this error: > https://analysis.apache.org/jenkins/job/tomcat-trunk/10/console > > Any help will be appreciate :-) Disable the unit tests until you get this working. They add about an hour to the build time. Use "clean

[Bug 56940] New: Cache mechanism for "ConstantUtf8.java" doesn't have any benefit

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56940 Bug ID: 56940 Summary: Cache mechanism for "ConstantUtf8.java" doesn't have any benefit Product: Tomcat 7 Version: trunk Hardware: PC Status: NEW

[Bug 56940] Cache mechanism for "ConstantUtf8.java" doesn't have any benefit

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56940 --- Comment #1 from hzha...@ebay.com --- Created attachment 31984 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31984&action=edit test case -- You are receiving this mail because: You are the assignee for the bug. ---

[Bug 56940] Cache mechanism for "ConstantUtf8.java" doesn't have any benefit

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56940 hzha...@ebay.com changed: What|Removed |Added Attachment #31983|0 |1 is patch|

Re: Coverity static analysis scanning

2014-09-10 Thread Fabrice Bellingard
Hi Olivier, Looks like the configuration of the SQ build step is not fully correct. >From the following command line: > [workspace] $ /x1/jenkins/sonar-runner/bin/sonar-runner > -Dsonar.jdbc.driver=com.mysql.jdbc.Driver > -Dsonar.jdbc.url=jdbc:mysql://192.168.0.64:3306/sonar?useUnicode=true&char

svn commit: r1624003 - in /tomcat/site/trunk: docs/security-7.html xdocs/security-7.xml

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 13:59:55 2014 New Revision: 1624003 URL: http://svn.apache.org/r1624003 Log: Announce CVE-2013- Modified: tomcat/site/trunk/docs/security-7.html tomcat/site/trunk/xdocs/security-7.xml Modified: tomcat/site/trunk/docs/security-7.html URL: http://svn.apa

[SECURITY] CVE-2013-4444 Remote Code Execution in Apache Tomcat

2014-09-10 Thread Mark Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2013- Remote Code Execution Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Apache Tomcat 7.0.0 to 7.0.39 Description: In very limited circumstances, it was possible for an attacker to upload a malicious JS

svn commit: r1624110 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java SourceFile.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:23:01 2014 New Revision: 1624110 URL: http://svn.apache.org/r1624110 Log: Remove unused code (SourceFile) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/SourceFile.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/At

svn commit: r1624112 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java ConstantValue.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:25:59 2014 New Revision: 1624112 URL: http://svn.apache.org/r1624112 Log: Remove unused code (ConstantValue) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantValue.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classf

svn commit: r1624115 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java Code.java ExceptionTable.java LineNumberTable.java LocalVariableTable.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:33:20 2014 New Revision: 1624115 URL: http://svn.apache.org/r1624115 Log: Remove unused code (Code) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Code.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Attribute.java

svn commit: r1624116 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java ExceptionTable.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:38:09 2014 New Revision: 1624116 URL: http://svn.apache.org/r1624116 Log: Remove unused code (ExceptionTable) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ExceptionTable.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/clas

svn commit: r1624119 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java LineNumberTable.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:41:20 2014 New Revision: 1624119 URL: http://svn.apache.org/r1624119 Log: Remove unused code (LineNumberTable) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/LineNumberTable.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/cl

svn commit: r1624122 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java LocalVariableTable.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:47:40 2014 New Revision: 1624122 URL: http://svn.apache.org/r1624122 Log: Remove unused code (LocalVariableTable) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/LocalVariableTable.java Modified: tomcat/trunk/java/org/apache/tomcat/util/

svn commit: r1624124 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java InnerClasses.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:51:54 2014 New Revision: 1624124 URL: http://svn.apache.org/r1624124 Log: Remove unused code (InnerClasses) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/InnerClasses.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfil

svn commit: r1624126 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java Deprecated.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:57:56 2014 New Revision: 1624126 URL: http://svn.apache.org/r1624126 Log: Remove unused code (Deprecated) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Deprecated.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/At

svn commit: r1624129 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 20:59:30 2014 New Revision: 1624129 URL: http://svn.apache.org/r1624129 Log: Fail fast Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Attribute.java tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Utility.java Modified: tomcat/tru

svn commit: r1624130 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java PMGClass.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:01:15 2014 New Revision: 1624130 URL: http://svn.apache.org/r1624130 Log: Remove unused code (PMGClass) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/PMGClass.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Attrib

svn commit: r1624132 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java LocalVariableTypeTable.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:03:28 2014 New Revision: 1624132 URL: http://svn.apache.org/r1624132 Log: Remove unused code (LocalVariableTypeTable) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/LocalVariableTypeTable.java Modified: tomcat/trunk/java/org/apache/tomc

svn commit: r1624133 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java EnclosingMethod.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:05:38 2014 New Revision: 1624133 URL: http://svn.apache.org/r1624133 Log: Remove unused code (EnclosingMethod) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/EnclosingMethod.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/cl

svn commit: r1624135 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Annotations.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:18:01 2014 New Revision: 1624135 URL: http://svn.apache.org/r1624135 Log: Simplify. No functional change. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Annotations.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/An

svn commit: r1624139 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantPool.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:30:03 2014 New Revision: 1624139 URL: http://svn.apache.org/r1624139 Log: Some constant types are never used so they can be swallowed which means returning null. That could trigger an NPE so make sure it doesn't. Modified: tomcat/trunk/java/org/apache/tomcat

svn commit: r1624142 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantCP.java ConstantFieldref.java ConstantInterfaceMethodref.java ConstantMethodref.java ConstantP

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:56:03 2014 New Revision: 1624142 URL: http://svn.apache.org/r1624142 Log: Remove unused code (ConstantCP and sub-classes) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantCP.java tomcat/trunk/java/org/apache/tomcat/util/bcel/class

svn commit: r1624143 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantMethodHandle.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 21:58:09 2014 New Revision: 1624143 URL: http://svn.apache.org/r1624143 Log: Remove unused code (ConstantMethodHandle) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantMethodHandle.java Modified: tomcat/trunk/java/org/apache/tomcat/u

svn commit: r1624147 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantPool.java ConstantString.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:14:25 2014 New Revision: 1624147 URL: http://svn.apache.org/r1624147 Log: Remove unused code (ConstantString) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantString.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/clas

svn commit: r1624150 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantNameAndType.java ConstantPool.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:16:52 2014 New Revision: 1624150 URL: http://svn.apache.org/r1624150 Log: Remove unused code (ConstantNameAndType) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantNameAndType.java Modified: tomcat/trunk/java/org/apache/tomcat/uti

svn commit: r1624152 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantMethodType.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:19:00 2014 New Revision: 1624152 URL: http://svn.apache.org/r1624152 Log: Remove unused code (ConstantMethodType) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantMethodType.java Modified: tomcat/trunk/java/org/apache/tomcat/util/

svn commit: r1624155 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Constant.java ConstantInvokeDynamic.java Utility.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:20:57 2014 New Revision: 1624155 URL: http://svn.apache.org/r1624155 Log: Remove unused code (ConstantInvokeDynamic) Removed: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantInvokeDynamic.java Modified: tomcat/trunk/java/org/apache/tomcat

svn commit: r1624156 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/AnnotationDefault.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:27:25 2014 New Revision: 1624156 URL: http://svn.apache.org/r1624156 Log: Simplify. No functional change. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/AnnotationDefault.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/class

svn commit: r1624157 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: Attribute.java Constant.java ConstantPool.java FieldOrMethod.java JavaClass.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:28:01 2014 New Revision: 1624157 URL: http://svn.apache.org/r1624157 Log: Remove unused clone() methods and references to Cloneable Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/Attribute.java tomcat/trunk/java/org/apache/tomcat/util/b

svn commit: r1624162 - in /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile: ConstantClass.java ConstantDouble.java ConstantFloat.java ConstantInteger.java ConstantLong.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:41:48 2014 New Revision: 1624162 URL: http://svn.apache.org/r1624162 Log: Simplify constructors. No functional change. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantClass.java tomcat/trunk/java/org/apache/tomcat/util/bcel/class

svn commit: r1624163 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantUtf8.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:42:12 2014 New Revision: 1624163 URL: http://svn.apache.org/r1624163 Log: Remove unused code. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantUtf8.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ConstantUtf8.

svn commit: r1624164 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/FieldOrMethod.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:42:31 2014 New Revision: 1624164 URL: http://svn.apache.org/r1624164 Log: Simplify constructors. No functional change. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/FieldOrMethod.java Modified: tomcat/trunk/java/org/apache/tomcat/util/bc

svn commit: r1624165 - /tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ParameterAnnotations.java

2014-09-10 Thread markt
Author: markt Date: Wed Sep 10 22:42:49 2014 New Revision: 1624165 URL: http://svn.apache.org/r1624165 Log: Simplify constructors. No functional change. Modified: tomcat/trunk/java/org/apache/tomcat/util/bcel/classfile/ParameterAnnotations.java Modified: tomcat/trunk/java/org/apache/tomcat

[Bug 56952] New: Move JasperInitializer into separate jar

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56952 Bug ID: 56952 Summary: Move JasperInitializer into separate jar Product: Tomcat 8 Version: 8.0.12 Hardware: All OS: All Status: NEW Severity: normal

[Bug 56953] New: A improvement for "DataInputStream"

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56953 Bug ID: 56953 Summary: A improvement for "DataInputStream" Product: Tomcat 7 Version: trunk Hardware: PC Status: NEW Severity: enhancement Priority: P2

[Bug 56953] A improvement for "DataInputStream"

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56953 --- Comment #1 from hzha...@ebay.com --- Created attachment 31994 --> https://issues.apache.org/bugzilla/attachment.cgi?id=31994&action=edit test case -- You are receiving this mail because: You are the assignee for the bug. ---

[Bug 56953] A improvement for "DataInputStream"

2014-09-10 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=56953 hzha...@ebay.com changed: What|Removed |Added Attachment #31993|0 |1 is patch|