Static Code Analysis Suppression

Is there a way to suppress code analysis errors that are coming from a referenced database when the referenced database is added as "Database location: Same database". I still want to enforce the rules in my code, but another team owns dbo and
provided me a dacpac. This also happens when the underlying database is added as a project reference.
Below is a snippet from the StaticCodeAnalysis.Results.xml file.
<?xml version="1.0" encoding="utf-8"?>
<Problems>
<Problem>
<Rule>Microsoft.Rules.Data.SR0009</Rule>
<ProblemDescription>Avoid NVARCHAR of only one element.</ProblemDescription>
<SourceFile />
<Line>0</Line>
<Column>0</Column>
<Severity>Error</Severity>
</Problem>
</Problems>

Hi Mark, are you using the latest version of the tools? This seems like an error as we wouldn't expect analysis of referenced code. If this is happening on our latest update could you please file
a connect bug for this issue at https://connect.microsoft.com/SQLServer/feedback/CreateFeedback.aspx and
use the category "Developer Tools(SSDT, BIDS, etc.)". We're trying to track all bugs through connect so that you can tell when we have fixed the issue and we can request more information.
Thanks,
Kevin

Similar Messages

Is there any plug-ins for static code analysis in Jdeveloper

Hi,
Is there any PMD, check style and static code analysis plug-ins available for JDeveloper? Those are available for Eclipse. How to achieve that in the JDeveloper?
Regards,
Raghu.

This should help-
PMD plugin for JDeveloper 11.1.2.0
http://develishdevelopment.wordpress.com/2012/03/12/have-released-pmd-jdeveloper-extension-4-3/
Always mention you Jdev version. Here I just assumed yours :P

Static code analysis

Does anybody know if exist tools for static code analysis of
actionscript?
I mean tool like checkstyle, pmd of findbug for java.
Thanks.

Hi Bill,
There was a presentation at NI Week on "NI LabVIEW Development Style Guidelines", and at the end of the presentation, a demo was given of the VI Analyzer, an unreleased style and performance analysis toolkit for LabVIEW by National Instruments. The presenter indicated that it was in Alpha at the time of the presentation (mid-August).
-D
Darren Nattinger, CLA
LabVIEW Artisan and Nugget Penman

Java static code analysis tool on Windows

What Java static source code analysis tool are there on Microsoft Windows, and which would you recommend?
I Know Coverity and
Klocwork
Edited by: Jennifer.helen on May 8, 2009 6:03 AM

I submit PMD and Findbugs.

JS-Linter,a static javascript analysis extension for HTML5 Canvas documents in Flash Pro CC

JSLinter is a extension for Flash Pro CC for static code analysis of timeline javascript in ’HTML5 Canvas’ docs.It helps to detect errors and potential problems in your timeline javascript code .
You can download the extension form my blog here
http://hemanthkumarr.wordpress.com/2013/12/05/js-lintera-static-javascript-analysis-extens ion-for-html5-canvas-documents-in-flash-pro-cc/

Checked just now .It is working for me and i can download the extension.
Can you just verify again and let me know?
-Hemanth

TFS Build - Code Analysis is not happening.

Dear support,<o:p style="font-family:'Times New Roman';font-size:medium;line-height:normal;"></o:p>
<o:p style="font-family:'Times New Roman';font-size:medium;line-height:normal;"> </o:p>
I have the following issue with TFS build system.
<o:p style="font-family:'Times New Roman';font-size:medium;line-height:normal;"> </o:p>
Although I have configured the projects in my solutions to run the static code analysis during build, and I have created a build definition to build these solutions, I’m unable
to get the corresponding static code analysis report in the build summary. This is also the case if I set Perform Code Analysis to Always in the build definition. Is this a bug or am I missing something?
Regards
Hem

Hi Hem,
Thanks for your reply.
You’re using TFS 2013 Update 4?
Do you mean that you have installed the VS 2013 Premium on your build agent machine, and if you manually build your solution using this VS 2013 Premium on build agent machine, the code analysis result show correctly in build result?
Please follow the steps in document to check your solution and build definition settings:
https://msdn.microsoft.com/en-us/library/bb668977.aspx?f=255&MSPPError=-2147217396.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Help please .. Automatic code analysis tool

Hi,
I have written some action script for my project and i am
required to do a static code analysis on it.
I do not know any source code analyzers that support
actionscript particularly like fortify and ounce labs which
support Java script but not action script.Please suggest me
an tool that can do analysis for me.
Regards
Mallik.

Hi Ross,
Thank you very much for your reply, i think i should rephrase
my question to make it even clear.
I am looking for a tool to detect Buffer overflows, memory
leaks, security vulnerabilities, string vulnerabilities, Race
conditions. I am sorry i think by mentioning security i gave the
impression of protection my application from external intrusion.
But this is what i meant. For example, My project also includes C#
usage and i have options like fortifysoftware, ouncelabs
,parasoft's .TEST, FxCop (microsoft) to help me do static analysis
on my C# code. I need some tool like these for action
scripts.Please let me know if you need more explanation.
Regards
Mallik

Source code analysis tools for ActionScript 2?

I have been tasked with performing source code analysis on a very large (>1000 files) AS2 codebase.
Not surprisingly, Googling is not yielding useful results. Before declaring defeat, I felt it important to query this forum.
Any guidance would be appreciated.

We'd like to evaluate the hundreds of files using a static analysis tool, just as one would use lint for a C codebase.
Thanks,
M

Unable to run code analysis with WDK 9926

Hi,
I am trying to run code analysis with WDK 9926 and seeing below issue? can anybody help me to resolve this ?
Error:
====
C:\sw\dev\T4\windows\Src\kernel\vbd>msbuild.exe cht4vbd.vcxproj /p:Configuration="Windows 8.1 Debug" /P:Platform=x64 /P:RunCodeAnalysisOnce=True
Microsoft (R) Build Engine version 12.0.21005.1
[Microsoft .NET Framework, version 4.0.30319.33440]
Copyright (C) Microsoft Corporation. All rights reserved.
Build started 4/7/2015 12:08:30 AM.
Project "C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" on node 1 (defaul
t targets).
DriverBuildNotifications:
Building 'cht4vbd' with toolset 'WindowsKernelModeDriver10.0' and the 'Deskto
p' target platform.
Using KMDF 1.11.
PrepareForBuild:
Creating directory "x64\Windows8.1Debug\".
Creating directory "C:\sw\dev\T4\windows\Src\kernel\vbd\x64\Windows8.1Debug\c
hk\x64\".
Creating directory "x64\Windows8.1Debug\cht4vbd.tlog\".
InitializeBuildStatus:
Creating "x64\Windows8.1Debug\cht4vbd.tlog\unsuccessfulbuild" because "Always
Create" was specified.
StampInf:
c:\Program Files (x86)\Windows Kits\10\bin\x86\stampinf.exe -d "*" -a "amd64"
   -k "1.11" -f x64\Windows8.1Debug\chvbdx64.inf
Copying "C:\sw\dev\T4\windows\Src\kernel\vbd\chvbdx64.inf" to "x64\Windows8.1
Debug\chvbdx64.inf" for stamping
Using version information from c:\Program Files (x86)\Windows Kits\10\Include
\shared\\ntverp.h
Could not open version header file c:\Program Files (x86)\Windows Kits\10\Inc
lude\shared\\bldnump.h. (0x00000002)
Could not determine version information. Please specify using -v option.
Updates common INF file directives
        USAGE:
        stampinf -f filename [-s section] [-d <xx/yy/zzzz> | *]
                 -a architecture -n [-c catalogfile]
                             [-v <w.x.y.z> | *]
                             [-k nnnnn] [-u nnnnn]
                             [-i path]
        -f specifies the INF file to process
        -s specifies the INF section to place the DriverVer= directive. By
            default this directive is placed in the [Version] section.
        -d specifies the date written in the DriverVer= directive. Note that
            a '*' given for a date value means for stampinf to write the
            current date. If the date is not specified, the date is taken
            from the STAMPINF_DATE environment variable.
        -v specifies the version written in the DriverVer= directive. Note
            that a '*' given for a version value means for stampinf to write
            the current time (h.m.s.ms). This is useful during development
            in order to get increasing version numbers. If the version is not
            specified, its value is taken from the STAMPINF_VERSION
            environment variable.
        -a specifies the architecture string to replace the $ARCH$ keyword.
            The $ARCH$ keyword is used to tailor a TargetOSVersion decoration
            in a [Manufacturer] section, as well as its respective section
            name, to a specific platform. If no value is specified, stampinf
            takes its value from the _BuildArch environment variable.
        -c specifies the value to be written in the CatalogFile= directive
            in the [Version] section. By default, this directive is not
            written.
        -k specifies the version of KMDF that this driver depends on. This
            is used to tailor the KmdfLibraryVersion & KMDF co-installer name
            in the INF. This will replace the $KMDFVERSION$ and
            $KMDFCOINSTALLERVERSION$ keywords in the INF. The string is of
            the format:
                <major_version>.<minor_version>
            As an example, supplying 1.5 as the version string will result in
            values of 1.5 and 01005 for the two keywords (respectively).
        -u specifies the version of UMDF that this driver depends on. This
            is used to tailor the UmdfLibraryVersion & UMDF co-installer name
            in the INF. This will replace the $UMDFVERSION$ and
            $UMDFCOINSTALLERVERSION$ keywords in the INF. The string is of
            the format:
                <major_version>.<minor_version>.<service_version>
            (where service_version is generally zero)
            As an example, supplying 1.5.0 as the version string will result
            in values of 1.5.0 and 01005 for the two keywords (respectively).
        -i specifies the location of ntverp.h file.
            path represent the fully qualified
            location of the directory containing ntverp.h.
        -n noisy mode shows verbose stampinf output
          -x removes the coinstaller tag from the file and replaces the line w
ith a ";"
        NOTES:
        The environment variable PRIVATE_DRIVER_PACKAGE can be set to
        enable stampinf's 'developer mode' behavior. When this is
        set, the date and version used for DriverVer is set to the
        current date and time, regardless of the command line
        settings. Also, 'CatalogFile=delta.cat' is written to the
        version section, unless a catalog was already specified
        with '-c'.
c:\Program Files (x86)\Windows Kits\10\build\WindowsDriver.common.targets(355,5
): error MSB6006: "stampinf.exe" exited with code 1. [C:\sw\dev\T4\windows\Src\
kernel\vbd\cht4vbd.vcxproj]
Done Building Project "C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" (de
fault targets) -- FAILED.
Build FAILED.
"C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" (default target) (1) ->
(StampInf target) ->
c:\Program Files (x86)\Windows Kits\10\build\WindowsDriver.common.targets(355
,5): error MSB6006: "stampinf.exe" exited with code 1. [C:\sw\dev\T4\windows\Sr
c\kernel\vbd\cht4vbd.vcxproj]
    0 Warning(s)
    1 Error(s)
Time Elapsed 00:00:04.07
Thanks, Krishna

Hi,
I am trying to run code analysis with WDK 9926 and seeing below issue? can anybody help me to resolve this ?
Error:
====
C:\sw\dev\T4\windows\Src\kernel\vbd>msbuild.exe cht4vbd.vcxproj /p:Configuration="Windows 8.1 Debug" /P:Platform=x64 /P:RunCodeAnalysisOnce=True
Microsoft (R) Build Engine version 12.0.21005.1
[Microsoft .NET Framework, version 4.0.30319.33440]
Copyright (C) Microsoft Corporation. All rights reserved.
Build started 4/7/2015 12:08:30 AM.
Project "C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" on node 1 (defaul
t targets).
DriverBuildNotifications:
Building 'cht4vbd' with toolset 'WindowsKernelModeDriver10.0' and the 'Deskto
p' target platform.
Using KMDF 1.11.
PrepareForBuild:
Creating directory "x64\Windows8.1Debug\".
Creating directory "C:\sw\dev\T4\windows\Src\kernel\vbd\x64\Windows8.1Debug\c
hk\x64\".
Creating directory "x64\Windows8.1Debug\cht4vbd.tlog\".
InitializeBuildStatus:
Creating "x64\Windows8.1Debug\cht4vbd.tlog\unsuccessfulbuild" because "Always
Create" was specified.
StampInf:
c:\Program Files (x86)\Windows Kits\10\bin\x86\stampinf.exe -d "*" -a "amd64"
   -k "1.11" -f x64\Windows8.1Debug\chvbdx64.inf
Copying "C:\sw\dev\T4\windows\Src\kernel\vbd\chvbdx64.inf" to "x64\Windows8.1
Debug\chvbdx64.inf" for stamping
Using version information from c:\Program Files (x86)\Windows Kits\10\Include
\shared\\ntverp.h
Could not open version header file c:\Program Files (x86)\Windows Kits\10\Inc
lude\shared\\bldnump.h. (0x00000002)
Could not determine version information. Please specify using -v option.
Updates common INF file directives
        USAGE:
        stampinf -f filename [-s section] [-d <xx/yy/zzzz> | *]
                 -a architecture -n [-c catalogfile]
                             [-v <w.x.y.z> | *]
                             [-k nnnnn] [-u nnnnn]
                             [-i path]
        -f specifies the INF file to process
        -s specifies the INF section to place the DriverVer= directive. By
            default this directive is placed in the [Version] section.
        -d specifies the date written in the DriverVer= directive. Note that
            a '*' given for a date value means for stampinf to write the
            current date. If the date is not specified, the date is taken
            from the STAMPINF_DATE environment variable.
        -v specifies the version written in the DriverVer= directive. Note
            that a '*' given for a version value means for stampinf to write
            the current time (h.m.s.ms). This is useful during development
            in order to get increasing version numbers. If the version is not
            specified, its value is taken from the STAMPINF_VERSION
            environment variable.
        -a specifies the architecture string to replace the $ARCH$ keyword.
            The $ARCH$ keyword is used to tailor a TargetOSVersion decoration
            in a [Manufacturer] section, as well as its respective section
            name, to a specific platform. If no value is specified, stampinf
            takes its value from the _BuildArch environment variable.
        -c specifies the value to be written in the CatalogFile= directive
            in the [Version] section. By default, this directive is not
            written.
        -k specifies the version of KMDF that this driver depends on. This
            is used to tailor the KmdfLibraryVersion & KMDF co-installer name
            in the INF. This will replace the $KMDFVERSION$ and
            $KMDFCOINSTALLERVERSION$ keywords in the INF. The string is of
            the format:
                <major_version>.<minor_version>
            As an example, supplying 1.5 as the version string will result in
            values of 1.5 and 01005 for the two keywords (respectively).
        -u specifies the version of UMDF that this driver depends on. This
            is used to tailor the UmdfLibraryVersion & UMDF co-installer name
            in the INF. This will replace the $UMDFVERSION$ and
            $UMDFCOINSTALLERVERSION$ keywords in the INF. The string is of
            the format:
                <major_version>.<minor_version>.<service_version>
            (where service_version is generally zero)
            As an example, supplying 1.5.0 as the version string will result
            in values of 1.5.0 and 01005 for the two keywords (respectively).
        -i specifies the location of ntverp.h file.
            path represent the fully qualified
            location of the directory containing ntverp.h.
        -n noisy mode shows verbose stampinf output
          -x removes the coinstaller tag from the file and replaces the line w
ith a ";"
        NOTES:
        The environment variable PRIVATE_DRIVER_PACKAGE can be set to
        enable stampinf's 'developer mode' behavior. When this is
        set, the date and version used for DriverVer is set to the
        current date and time, regardless of the command line
        settings. Also, 'CatalogFile=delta.cat' is written to the
        version section, unless a catalog was already specified
        with '-c'.
c:\Program Files (x86)\Windows Kits\10\build\WindowsDriver.common.targets(355,5
): error MSB6006: "stampinf.exe" exited with code 1. [C:\sw\dev\T4\windows\Src\
kernel\vbd\cht4vbd.vcxproj]
Done Building Project "C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" (de
fault targets) -- FAILED.
Build FAILED.
"C:\sw\dev\T4\windows\Src\kernel\vbd\cht4vbd.vcxproj" (default target) (1) ->
(StampInf target) ->
c:\Program Files (x86)\Windows Kits\10\build\WindowsDriver.common.targets(355
,5): error MSB6006: "stampinf.exe" exited with code 1. [C:\sw\dev\T4\windows\Sr
c\kernel\vbd\cht4vbd.vcxproj]
    0 Warning(s)
    1 Error(s)
Time Elapsed 00:00:04.07
Thanks, Krishna

Source Code Analysis tool for BPEL (and BPMN) 11g

Hi,
We are checking for the availablility of 'source code analysis' tools (analogy like findbug, checkstyle) for BPEL / BPMN Orchestrations.
Any information/pointers to it is really valuable and appreciated.
Thanks,
Pavan.

Hi AnujaMoharir,
Welcome to MSDN.
I am afraid that as Renee Culver said, these forums donot support VB6, you could refer to this thread:
Where to post your VB 6 questions
You could consider posting this issue in these forums below:
These forums do not support Visual Basic 6, however there are many third-party support sites that do. If you have a VB6-related question please visit these popular forums:
VB Forums
VB City
Thanks for your understanding.
Best Regards,
Youjun Tang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Any code analysis , audit tool for adf

Hi,
Anyone aware of any code analysis and audit tool for ADF.
Thanks,
Rohit

duplicate.
Free Security testing tool ADF
Edited by: ADF 7 on Jan 18, 2012 11:05 PM

Code Analysis rule C6386 seems to report many false Write Buffer Overrun message

Hi,
why does Code Analysis complain on next peace of code ?
we have many loops where the same issue is reported where we loop on (int i = 0 ; i < size ; i++ )
_TCHAR * Name = new _TCHAR[String.GetLength() + 2];
Name[0] = LanguageKey;
for (i=0; i < String.GetLength(); i++)
Name[i + 1] = String.GetAt(i);
Name[i+1] = 0x00;
i get next details :
C6386 Write overrun
Buffer overrun while writing to 'Name': the writable size is '(String.public: int __cdecl ATL::CSimpleStringT<char,0>::GetLength(void)const ()+2)*1' bytes, but '4' bytes might be written.
WinRoute
gr_configuration.cpp
453
'Name' is an array of 3 elements (3 bytes)
446
Enter this loop, (assume 'i<String.GetLength()')
450
Continue this loop, (assume 'i<String.GetLength()')
450
'i' may equal 2
450
Exit this loop, ('i<String.GetLength()' is false)
450
Invalid write to 'Name[3]', (writable range is 0 to 2)
453
I think that actually if "i" may be 2 then it means the String.GetLenght() is at least 3 ( because i < String.GetLenght() ) in the
loop condition. So then the array has at least lenght of (3 + 2) * sizeof(_TCHAR) , making it writable to at least Name[3] ( and even Name[4] )
Thanks,

It seems to me Code Analysis is wrong.
You can also try single stepping using VS debugger, and check that index (i+1) at the end of the loop is just fine and in-bounds.
Anyway, I wonder why don't you just use string concatenation operations (i.e. operator+=) instead of writing manual concatenation code?
If you need a raw character pointer from the built string (e.g. for some legacy C API interop), you can always call CString::GetString() to get it (or use implicit CString conversion operator).
Giovanni

Code analysis in VS2013

I need to analysis code [code review] for a single page in a project.
In VS I get option to analyse entire solution [My project solution no has 10 project] or by project wise. There I did't find any option to analyse a single page.
Every time its not possible to run code analysis for whole project as some project have 1000+ files.
Please guide me how to run analyse a single page.
Thanks for your replay in advance...
R

Hi SCRana,
The code analyze tool is used for projects and the whole solution, not for a specific page, if you just want to analyze one project in your solution, please select it with your mouse in solution explorer window, and then you could get the option under
"ANALYZE" menu like "Run code analysis or Code Metrics for the Console app".
Best Regards,
Jack
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Ignore the built-in Code Analysis CustomDictionary.xml?

I'm trying to setup Code Analysis for my project but I keep getting warnings CA1704 "Identifiers should be spelled correctly".
I've added a link to a new CustomDictionary.xml file to each of projects in the solution and this works fine for the majority of the words I want Code Analysis to recognize.
The problem is that there are some words already in the CustomDictionary.xml file in the Visual Studio installation folder, which as far as I can tell is always used. Is there any way to specify for the given solution not to check this built-in CustomDictionary?
Modifying this file isn't acceptable because I am working on a team and this file obviously isn't under source control.

Hi Cscode3,
Thanks for your reply.
For this issue, please refer to the replies in this feedback:https://connect.microsoft.com/VisualStudio/feedback/details/640787/custom-dictionary-does-not-behave-as-expected
As far as I know that one workaround is that we would change the default CustomDictionary.xml file in VS Install Directory for each machine.
I know that it is not the solution you want to get, but you could submit a feature request here:
http://visualstudio.uservoice.com/forums/121579-visual-studio.
The Visual Studio product team is listening to user voice there. You can send your idea there and people can vote.
Or post it in
VS Diagnostics forum for the better response.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Visual Studio 2013 Code Analysis Exception CA0055: Could not load assembly

I am trying to run the Code analysis on Web Project in VS2013 but i am getting the exception CA0055.
I took a look at the log file. Here is the exception information which is getting logged.
<Exception Keyword="CA0055" Kind="AssemblyLoad">
<Type>Microsoft.FxCop.Common.AssemblyLoadException</Type>
<ExceptionMessage>Could not load MyProject.dll.</ExceptionMessage>
<InnerType>System.NullReferenceException</InnerType>
<InnerExceptionMessage>Object reference not set to an instance of an object.</InnerExceptionMessage>
<InnerStackTrace> at Phx.Metadata.ReaderImplementation.CreateTokenMap()
at Phx.Metadata.MetadataLoader.GetModule(String fileName, FileInfo fileInfo, AssemblyUnit unit)
at Phx.Metadata.MetadataLoader.GetAssembly(String fileName, AssemblyUnit unit)
at Phx.Metadata.MetadataLoader.LoadAssemblyDefinition(AssemblyUnit unit)
at Microsoft.FxCop.Engines.Phoenix.AssemblyLoader.ProcessWorklist(MetadataLoader metadataLoader, Boolean ignoreErrors)
at Microsoft.FxCop.Engines.Phoenix.AssemblyLoader.LoadAttributeType(AggregateType type, MetadataLoader metadataLoader)
at Microsoft.FxCop.Engines.Phoenix.AssemblyLoader.LoadAttributes(List`1 attributes, MetadataLoader metadataLoader)
at Microsoft.FxCop.Engines.Phoenix.AssemblyLoader.LoadAttributes(ProgramUnit programUnit, MetadataLoader metadataLoader)
at Microsoft.FxCop.Engines.Phoenix.AssemblyLoader.LoadAssembly(String filePath)
at Microsoft.FxCop.Engines.Phoenix.PhoenixAnalysisEngine.AnalyzeInternal()
</InnerStackTrace>
</Exception>
Nayan K

Hi Nayan K,
>>ExceptionMessage>Could not load MyProject.dll.</ExceptionMessage>
<InnerType>System.NullReferenceException</InnerType>
If you disable the code analyze tool, and then build your web project, could you get this error message?
Generally this occurs if the file is not found or access to the file was denied.
Reference:
https://msdn.microsoft.com/en-us/library/ms244741(v=vs.90).aspx
Please check your project folder, whether you could get this dll file? Or make sure that you add the correct references in your project.
Best Regards,
Jack
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Static Code Analysis Suppression

Similar Messages

Maybe you are looking for