Findbugs Architecture

14
© Headway Software 2009 The Evolution of Findbugs Architecture

TAGS:

description

A short presentation on the evolution of the Findbugs architecture and the need to understand and control evolving software architecture.

Transcript of Findbugs Architecture

Page 1: Findbugs Architecture

© Headway Software 2009

The Evolution of

Findbugs Architecture

Page 2: Findbugs Architecture

“The human mind can not grasp the complexity of a moderately sized program, much less the monster systems we build today.”

Jonathan Edwards on Beautiful Code

Complexity

Page 3: Findbugs Architecture

Findbugs 0.8.6 October 2004

A healthy start – a clearly understood Architecture

Page 4: Findbugs Architecture

Findbugs 0.8.7 April 2005

Imperfection creeps in

Page 5: Findbugs Architecture

Findbugs 0.8.8 May 2005

Imperfection takes hold

Page 6: Findbugs Architecture

Findbugs 1.0.0 June 2006

Chaos begins

Page 7: Findbugs Architecture

Findbugs 1.3.5 September 2008

And it’s downhill from there

Page 8: Findbugs Architecture

Eeek!!!

© Headway Software 2008

Page 9: Findbugs Architecture

The Bottom Line

• Well Structured vs. Poorly Structured Software– 50% less time to deliver– 50% less cost to deliver– 8x less defects

Page 10: Findbugs Architecture

Divide & Conquer

© Headway Software 2008

Page 11: Findbugs Architecture

Does your code look like this?

Top Level Architecture of the Spring Framework with No Cyclic Dependencies

Page 12: Findbugs Architecture

What’s needed

• Visualize your “as-is” design

• Measure it’s quality

• Track it over time

• Define your target architecture

• Communicate it to the team

• Repair, refactor, refine– Time, after time, after time…

Page 13: Findbugs Architecture

“Tools exist for enforcing architecture. Start today, no more Word architectures!”

Magnus Robertsson, Enterprise Architect, Jayway

Page 14: Findbugs Architecture

Web Resources

© Headway Software 2009

Download Structure101: http://www.headwaysoftware.com/downloads/structure101/

On-Line Docs: http://www.headwaysoftware.com/help/java/

Product Tour: http://www.headwaysoftware.com/products/structure101/tour/visualize/


On the “Naturalness” of Buggy Codedevanbu/odd-bugs.pdf · to complement the effectiveness of PMD or FindBugs, and that search-based bug-fixing methods may benefit from using

On the “Naturalness” of Buggy Codedevanbu/odd-bugs.pdf · to complement the effectiveness of PMD or FindBugs, and that search-based bug-fixing methods may benefit from using

ARCHITECTURE. LANDSCAPE ARCHITECTURE

ARCHITECTURE. LANDSCAPE ARCHITECTURE

Mining Fix Patterns for FindBugs Violations · PMD [5] while C projects use Splint [6], cppcheck [7], or Clang Static Analyzer [9], while Linux driver code are systematically assessed

Mining Fix Patterns for FindBugs Violations · PMD [5] while C projects use Splint [6], cppcheck [7], or Clang Static Analyzer [9], while Linux driver code are systematically assessed

A Case Study of Refactoring Large-Scale Industrial Systems ...ncsaba/research/pdfs/2014/... · smells [17] and by using static rule checkers such as CheckStyle , FindBugs yand PMD

A Case Study of Refactoring Large-Scale Industrial Systems ...ncsaba/research/pdfs/2014/... · smells [17] and by using static rule checkers such as CheckStyle , FindBugs yand PMD

Fault Localization Based Only on Failed Runs · 2020. 3. 16. · Static analyzers like FindBugs 13 require neither passed nor failed runs. They may, however, produce warnings even

Fault Localization Based Only on Failed Runs · 2020. 3. 16. · Static analyzers like FindBugs 13 require neither passed nor failed runs. They may, however, produce warnings even

Code Analysis Tools and Tips - Object Computingjava.ociweb.com/javasig/knowledgebase/2010-04/Code...Code Analysis (Automated Code Reviews) FindBugs PMD CheckStyle Jdepend Ckjm Cpd

Code Analysis Tools and Tips - Object Computingjava.ociweb.com/javasig/knowledgebase/2010-04/Code...Code Analysis (Automated Code Reviews) FindBugs PMD CheckStyle Jdepend Ckjm Cpd

Info Support Blog · Target: JavaOne 2014 San Francisco battleyourwaytojavaone2014 . Veelgebruikte tools zijn Checkstyle, Findbugs, Sonar, EclEmma, Cobertura of tooling die ge- bruikt

Info Support Blog · Target: JavaOne 2014 San Francisco battleyourwaytojavaone2014 . Veelgebruikte tools zijn Checkstyle, Findbugs, Sonar, EclEmma, Cobertura of tooling die ge- bruikt

Lightweight Verification of Array Indexingkelloggm/papers/issta18-slides.pdf · Comparison to other tools: confirmed bugs Tool Index Checker FindBugs KeY Clousot True Positives 18/18

Lightweight Verification of Array Indexingkelloggm/papers/issta18-slides.pdf · Comparison to other tools: confirmed bugs Tool Index Checker FindBugs KeY Clousot True Positives 18/18

April 05 Prof. Ismael H. F. Santos - ismael@tecgraf.puc-rio.br 1 Modulo II Findbugs Professor Ismael H F Santos – ismael@tecgraf.puc-rio.brismael@tecgraf.puc-rio.br.

April 05 Prof. Ismael H. F. Santos - [email protected] 1 Modulo II Findbugs Professor Ismael H F Santos – [email protected]@tecgraf.puc-rio.br.

Prevent Vs FindBugs Application and Evaluation · FindBugs is a popular analysis tool, and many companies and organizations are using the tool. As of December, 2007, FindBugs has

Prevent Vs FindBugs Application and Evaluation · FindBugs is a popular analysis tool, and many companies and organizations are using the tool. As of December, 2007, FindBugs has

MagpieBridge: AGeneralApproachtoIntegrating ... · 42 SpotBugs[23],PMD[17]forcommonprogrammingflaws(e.g. unusedvariables,deadcode, ... FindBugs 132,343 16,670 0.13 SpotBugs 121,841

MagpieBridge: AGeneralApproachtoIntegrating ... · 42 SpotBugs[23],PMD[17]forcommonprogrammingflaws(e.g. unusedvariables,deadcode, ... FindBugs 132,343 16,670 0.13 SpotBugs 121,841

University of Maryland Institute for Advanced Computer ...well. Professor Bill Pugh’s pioneering open source FindBugs system to find bugs in Java code has been downloaded over 500,000

University of Maryland Institute for Advanced Computer ...well. Professor Bill Pugh’s pioneering open source FindBugs system to find bugs in Java code has been downloaded over 500,000

ARCHITECTURE ARCHITECTURE

ARCHITECTURE ARCHITECTURE

Open Source Used In Intelligent Node Manager 2 · Open Source Used In Intelligent Node Manager v2.0 5 1.55 fastutil 6.5.7 1.55.1 Available under license 1.56 FindBugs-jsr305 3.0.0

Open Source Used In Intelligent Node Manager 2 · Open Source Used In Intelligent Node Manager v2.0 5 1.55 fastutil 6.5.7 1.55.1 Available under license 1.56 FindBugs-jsr305 3.0.0

System Architecture ModuleSystem Architecture Moduleathena.ecs.csus.edu/~grandajj/ME296J/1. Lectures/6. System... · System Architecture ModuleSystem Architecture Module ... Architecture

System Architecture ModuleSystem Architecture Moduleathena.ecs.csus.edu/~grandajj/ME296J/1. Lectures/6. System... · System Architecture ModuleSystem Architecture Module ... Architecture

Effective Detection of SQL/XPath Injection …nmsa/pdf/2009-scc-presentation.pdfAcunetix Web Vulnerability Scanner Static code analysis FindBugs Yasca IntelliJ IDEA Marco Vieira SCC

Effective Detection of SQL/XPath Injection …nmsa/pdf/2009-scc-presentation.pdfAcunetix Web Vulnerability Scanner Static code analysis FindBugs Yasca IntelliJ IDEA Marco Vieira SCC

University of Toronto Department of Computer Science ...sme/CSC302/2008S/notes/21-static-analysis.pdf · FindBugs) Don’t use ‘==’ to compare strings (detected by FindBugs and

University of Toronto Department of Computer Science ...sme/CSC302/2008S/notes/21-static-analysis.pdf · FindBugs) Don’t use ‘==’ to compare strings (detected by FindBugs and

From 400 bugs to 0 in 2 weeks Using FindBugs

From 400 bugs to 0 in 2 weeks Using FindBugs

William Pugh Univ. of Maryland FindBugs · • Common idiom for thread safe classes is to synchronize on the receiver object (“this”) • We look for field accesses – Find

William Pugh Univ. of Maryland FindBugs · • Common idiom for thread safe classes is to synchronize on the receiver object (“this”) • We look for field accesses – Find

Defective Java Code: Mistakes That Matterpugh/MistakesThatMatter.pdfDefective Java Code Learning from mistakes > Iʼm the lead on FindBugs • static analysis tool for defect detection

Defective Java Code: Mistakes That Matterpugh/MistakesThatMatter.pdfDefective Java Code Learning from mistakes > Iʼm the lead on FindBugs • static analysis tool for defect detection