1. Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 1 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Verification & Testing Assignment 2 – Static Analysis with ESC/Java Robert Könighofer Ayrat Khalimov Christof Rabensteiner IAIK – Graz University of Technology

2. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 2 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 About Assignment 1  Abgabegespräche:  Thursday, Nov 19, 2015  IAIK meeting room (F1.04), Inffeldgasse 16a IAIK meeting room  Reserve a time slot in TWIKI  Feedback:  https://www.surveymonkey.com/r/2DW2DTQ https://www.surveymonkey.com/r/2DW2DTQ

3. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 3 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Assignment 1: Common Mistakes  Task 2:  Candidate Lockset and Thread Lockset share hashset object objInfo.setProtrectingLocks(locksHeld.get(t))  Could not handle multiple calls on lock() and unlock()  Task 3:  Exception Handling  Tests

4. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 4 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Administrivia: Group Changes  If you don’t change group (preferred!):  Reuse existing repository  Put new stuff in assignment_2 folder  You can leave assignment_1 folder in place  No need to do anything about the URL on the wiki  If you change group:  Form new groups for assignment 2.  Make a new repository, with just assignment_2 folder  Add new repository to wiki page in section “Assignment 2”  Remove obsolete repository from section “Assignment 2”  Grant Read Access!

5. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 5 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Assignment 2 – Static Analysis with ESC/Java  Assignment Description:  https://verify.iaik.tugraz.at/teaching/vt/bin/view/Main/AssignmentTw o2015 https://verify.iaik.tugraz.at/teaching/vt/bin/view/Main/AssignmentTw o2015  Due: Nov. 30, 2015, 23:59  Task 0:  Get ESC Java running on your machine  Work through tutorial  Task 1:  Annotate an existing program (Stack), answer some questions  Task 2:  Find a bug in a Mergesort implementation using ESC/Java  Task 3:  Annotate and find bug(s) in a Logger implementation

6. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 6 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 ESC/Java  Extended Static Checker for Java  direct descendant of the Compaq Extended Static Checker for Java  Development started in the 90ies.  Available at http://kindsoftware.com/products/opensource/ESCJava2/ESCTools/ docs/ESCJAVA-UsersManual.html http://kindsoftware.com/products/opensource/ESCJava2/ESCTools/ docs/ESCJAVA-UsersManual.html  Command-line tool  User manual  http://kind.ucd.ie/products/opensource/ESCJava2/ESCTools/docs/E SCJAVA-UsersManual.html http://kind.ucd.ie/products/opensource/ESCJava2/ESCTools/docs/E SCJAVA-UsersManual.html

7. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 7 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Some Caveats  ESC/Java is for Java 1.4!  Will not work with newer versions.   Best to make a separate installation  Setup paths accordingly  Works under Windows and Linux  For your convenience:  Virtual Machine Image with Lubuntu & ESC Java installed

8. http://www.iaik.tugraz.at Institute for Applied Information Processing and Communications (IAIK) – Secure & Correct Systems 8 Verification & Testing UEKönighofer, Khalimov, Rabensteiner2015 - 11 - 16 Assignment 2 … have fun!