Page tree
Skip to end of metadata
Go to start of metadata

This page presents the different messages that are produced by the .NET Analyzer during application source code analysis. Messages are presented with their identifier (referenced in the analysis log files), a description, and a possible remediation. 

BC30002

IdentifierBC30002
MessageType '<typename>' is not defined
SeverityError
ExplanationCompiler's Error Message when code statement makes reference to a type (Class, Enum, Structure or Interface) that has not been defined because of missing source. The impact is, the analysis results will be missing some links.
User ActionEnsure that all required source code is packaged and delivered.


BC30560

IdentifierBC30560
Message'<name>' is ambiguous in the namespace '<namespacename>'
SeverityError
ExplanationCompiler's Error Message when code statement provides a name that is ambiguous and therefore conflicts with another name. The impact is, the analysis results could have some false negatives.
User ActionNone currently

CS0234

IdentifierCS0234
MessageThe type or namespace name 'XXXXX' does not exist in the namespace 'Services' (are you missing an assembly reference?)
SeverityWarning
Explanation

A dependent project or a third party assembly was not provided within the perimeter of the application, and any reference to these items will cause this message. The immediate impact is that the analysis results will be missing some missing links to external objects. In the case where these external objects hold important semantics (presentation layer including exposed REST or SOAP API, persistence layer, logging library,...) the impact on results will be more important.

User Action

Ensure that all required source code is packaged and delivered.

If you are using release ≥ 1.1 of the .NET Analyzer extension, CAST provides some specific frameworks and third party packages with the extension, which will automatically be "used" during an analysis - as such, no specific DMT package is required for these assemblies. However, as it is not necessary to package the frameworks and third party packages used by your source code, missing library/assembly alerts for these items will be generated during the packaging action in the CAST Delivery Manager Tool. The alerts can be safely ignored if the alert references an item that CAST provides in the extension.

See the section Dependent frameworks and third-party packages provided in the extension documentation for more information and for a list of the specific frameworks and third party packages provided with the extension.

Since release ≥ 1.2.4 of the .NET Analyzer extension, this message is available only in debug mode. In normal mode, multiple occurences of CS0234 are replaced by a single DOTNET.150 message for one symbol per project.

CS0246

IdentifierCS0246
MessageThe type or namespace name 'XXXXX' could not be found (are you missing a using directive or an assembly reference?)
SeverityWarning
ExplanationA dependent project or a third party assembly was not provided within the perimeter of the application, and any reference to these items will cause this message. The impact is, the analysis results will be missing some links to external objects.
User Action

Ensure that all required source code is packaged and delivered. 

If you are using ≥ 1.1 of the .NET Analyzer extension, CAST provides some specific frameworks and third party packages with the extension, which will automatically be "used" during an analysis - as such, no specific DMT package is required. However, as it is not necessary to package the frameworks and third party packages used by your source code, missing library/assembly alerts for these items will be generated during the packaging action in the CAST Delivery Manager Tool. The alerts can be safely ignored if the alert references an item that CAST provides in the extension.

See the section Dependent frameworks and third-party packages provided in the extension documentation for more information and for a list of the specific frameworks and third party packages provided with the extension.

Since release ≥ 1.2.4 of the .NET Analyzer extension, this message is available only in debug mode. In normal mode, multiple occurences of CS0246 are replaced by a single DOTNET.150 message for one symbol per project.

CS0433

IdentifierCS0433
MessageThe type TypeName1 exists in both TypeName2 and TypeName3
SeverityWarning
Explanation

Two different assemblies referenced in your application contain the same namespace and type, which produces ambiguity. The impact is, the analysis results could have some false negatives.

User Action
None currently

DOTNET.0001

IdentifierDOTNET.0001
MessageMissing mandatory reference towards mscorlib: project {0} will be skipped. The references to mscorlib are mandatory to the analysis of the .Net projects.
SeverityFatal Error
ExplanationAs missing mandatory reference towards mscorlib.dll. the project will be skipped.
User Action

During the delivery of the sources, have a delivery of the framework assemblies and check that mscorlib is delivered as well.

Note that if you are using ≥ 1.1 of the .NET Analyzer extension, CAST provides some specific frameworks and third party packages with the extension, which will automatically be "used" during an analysis - as such, no specific DMT package is required for these. However, as it is not necessary to package the frameworks and third party packages used by your source code, missing library/assembly alerts for these items will be generated during the packaging action in the CAST Delivery Manager Tool. The alerts can be safely ignored if the alert references an item that CAST provides in the extension.

See the section Dependent frameworks and third-party packages provided in the extension documentation for more information and for a list of the specific frameworks and third party packages provided with the extension.

DOTNET.0002

IdentifierDOTNET.0002
Message

Analysis failure, could not load a type. The following assemblies could not be loaded as well.

SeverityError
ExplanationThe analysis has not ended correctly, because the listed assemblies cannot be loaded.
User ActionCheck that the listed assemblies are correctly delivered.

DOTNET.0003

IdentifierDOTNET.0003
Message

Unknown exception

SeverityWarning
ExplanationAn exception has occurred, and the analysis has stopped incorrectly.
User ActionContact CAST support.

DOTNET.0004

Identifier DOTNET.0004
Message

Trying to save a symbol twice.

SeverityError
ExplanationA .Net object is saved into the database twice, this is an abnormal situation.
User ActionContact CAST support.

DOTNET.0005

IdentifierDOTNET.0005
Message

Unmanaged database access kind. An error has occured and related external links will not be saved.

SeverityError
ExplanationAn error has occurred during the access to the database. The related external links will not be saved into the database, hence the results of the analysis will not be complete.
User ActionContact CAST support.

DOTNET.0006

IdentifierDOTNET.0006
Message

Unmanaged database access kind. An error has occured and related external links will not be saved.

SeverityError
ExplanationAn error has occurred during the access to the database. The related external links will not be saved into the database, hence the results of the analysis will not be complete.
User ActionContact CAST support.

DOTNET.0007

IdentifierDOTNET.0007
Message

Unknown language. Couldn't load project.

SeverityError
ExplanationThe project cannot be loaded as the language is unknown.
User ActionContact CAST support.

DOTNET.0008

IdentifierDOTNET.0008
Message

Could not load project {0}. The project will not be analyzed.

SeverityError
ExplanationThe project will not be analyzed as it cannot be loaded.
User ActionContact CAST support.

DOTNET.0009

IdentifierDOTNET.0009
Message

Could not load project. The project will not be analyzed.

SeverityError
ExplanationThe project will not be analyzed as it cannot be loaded.
User ActionContact CAST support.

DOTNET.0010

IdentifierDOTNET.0010
Message

Could not compute GUID for: " + Symbol.Accept(AnalysisSharedObjects.Instance.ManglingVisitor), e);

SeverityError
ExplanationThe GUID cannot be calculated for the listed symbol. The symbol cannot be saved and the analysis will be incomplete.
User ActionContact CAST support.

DOTNET.0011

IdentifierDOTNET.0011
Message

Analysis of " + project.Path + " has failed. An unexpected error happened leaving the analysis in an unknown state.\r\n"

SeverityError
ExplanationAn expected error has happened during the analysis of the project leaving the project in an anexpected state. The analysis is an unknown state.
User ActionContact CAST Support.

DOTNET.0012

IdentifierDOTNET.0012
Message

Could not load assembly {0}. No link will be saved toward its objects. (candidates are {1})", assemblyRef.Key, filePaths);

SeverityWarning
ExplanationThe assembly listed could not be loaded, therefore the links to this assembly cannot be created.
User Action

Check that the assembly is part of the DMT resource package, and check DMT alerts.

DOTNET.0013

IdentifierDOTNET.0013
Message

Failed to compile project {project file path}. The project will not be analyzed. {exception information}

SeverityWarning
ExplanationAn issue has occurred and the project cannot be compiled therefore it cannot be analyzed.
User ActionPlease check that the project compile in Visual Studio and add any missing element. If the problem persists, please contact CAST Support.

DOTNET.0014

IdentifierDOTNET.0014
Message

An error occurred when creating link for string "{interpreted string}": {exception information}

SeverityWarning
ExplanationAn issue has occured when trying to create a link to the listed string. The analysis results will be incomplete.
User ActionConctact the CAST Support.

DOTNET.0015

IdentifierDOTNET.0015
Message

No code behind source code found for " + _fileName

SeverityWarning
ExplanationThere is no code behind found to the file listed in the message.
User ActionPlease check if there is any code source behind for the listed file and if 'true' contact the CAST Support.

DOTNET.0016

IdentifierDOTNET.0016
Message

WebService directive is missing in " + _fileName

SeverityWarning
ExplanationIn the asmx file,  the web service directive is missing, therefore the analysis will be incomplete.
User ActionPlease check that the web service directive is part of the file.

DOTNET.0017

IdentifierDOTNET.0017
Message

Source language " + WebServiceDirective.Language + " in " + _fileName + " is not supported."

SeverityWarning
ExplanationThe language present in the file is not supported therefore it will not be analyzed.
User ActionContact CAST Support

DOTNET.0018

IdentifierDOTNET.0018
Message

WebService ignored : " + _fileName

SeverityWarning
ExplanationThe web service is ignored and will not be analyzed therefore the results of the analysis will be incomplete.
User ActionContact CAST Support.

DOTNET.0019

IdentifierDOTNET.0019
Message

Ignored unknown directive \"" + directiveName + "\" in " + _fileName

SeverityWarning
ExplanationThe directive listed in the asmx file is unknown by the .Net analyzer therefore the analysis results will be incomplete.
User ActionContact CAST Support.

DOTNET.0020

IdentifierDOTNET.0020
MessageError while processing visitor: " + astAnalyzer.GetType().Name + ". The analysis results may be incomplete.
SeverityWarning
ExplanationAn error has occurred while processing visitor and the analysis results may be incomplete.
User ActionContact CAST Support.

DOTNET.0021

IdentifierDOTNET.0021
Message

Error while processing visitor: " + castilAnalyzer.GetType().Name + ". The analysis results may be incomplete."

SeverityWarning
ExplanationAn issue has occurred during the analysis, during the processing a visitor. The analysis may be incomplete.
User ActionContact CAST Support.

DOTNET.0022

IdentifierDOTNET.0022
Message

Error when creating devirtualization link: {0}. The analysis results may be incomplete.", e.Message

SeverityWarning
ExplanationAn issue has occurred when creating devirtualisation links. The results of the analysis may be incomplete.
User ActionContact CAST support.

DOTNET.0023

IdentifierDOTNET.0023
Message

Could not trace link for {0}: {1}. The analysis results may be incomplete.", request, e.Message

SeverityWarning
ExplanationAn issue has occurred during the build of the external links therefore the link cannot be created. The analysis may be incomplete.
User ActionContact CAST support.

DOTNET.0024

IdentifierDOTNET.0024
Message

Failed to load types from referenced assembly: {0}. The analysis results may be incomplete.", ex.Message

SeverityWarning
ExplanationAn issue has occurred and the types has not been loaded from the indicated assembly.
User ActionContact CAST support.

DOTNET.0025

IdentifierDOTNET.0025
Message

Could not load referenced assembly {0} in {1}. The analysis results may be incomplete.", asmName.Value, svcmapFile.FullName

SeverityWarning
ExplanationThe referenced assembly cannot be loaded therefore the results may be incomplete.
User ActionContact CAST support.

DOTNET.0026

IdentifierDOTNET.0026
Message

Failed to generate code for web reference: {0}. The analysis results may be incomplete.", wsdlFile

SeverityWarning
ExplanationAn issue has occurred while generating code for the web reference. The results analysis may be incomplete.
User ActionContact CAST support.

DOTNET.0027

IdentifierDOTNET.0027
Message

An error happened while treating {0}. The analysis results may be incomplete.", wsdlFile.FullName

SeverityWarning
ExplanationAn issue has occurred while treating the WSDL file. The results of the analysis may be incomplete.
User ActionContact CAST support.

DOTNET.0028

IdentifierDOTNET.0028
Message

An error happened while treating {0}. The analysis results may be incomplete.", xsdFile.FullName

SeverityWarning
ExplanationAn issue has occurred while threating the file therefore the results of the analysis may be incomplete (loss of objects and links).
User ActionContact CAST support.

DOTNET.0029

IdentifierDOTNET.0029
Message

DOTNET.0029:Unexpected exception: {0}", ex.Message

SeverityWarning
ExplanationAn unexpected exception occurred with unknown impact on the results of the analysis.
User ActionContact CAST support.

DOTNET.0030

IdentifierDOTNET.0030
Message

Failed to generate proxy code for service reference: {0}. The analysis results may be incomplete.", svcmapFile

SeverityWarning
ExplanationAn issue has occurred during the preprocessing of the wsdl file. The results of the analysis may be incomplete leading to the loss of objects and links.
User ActionContact CAST support.

DOTNET.0031

IdentifierDOTNET.0031
Message

Failed to create the WSDL importer. The analysis results may be incomplete."

SeverityWarning
ExplanationAn issue has ocurred during the oreprocess of the WSDL. The results of the analysis may be incomplete leading to the loss of objects and links.
User ActionContact CAST support.

DOTNET.0032

IdentifierDOTNET.0032
Message

Failed to create the WSDL importer. The analysis results may be incomplete.

SeverityWarning
ExplanationAn issue has occurred and the WSDL importer could not be created.
User ActionContact CAST Support.

DOTNET.0033

IdentifierDOTNET.0033
Message

Could not generate {0} files from XAML files: {1} not found. The analysis results may be incomplete.", sourceExtension, exe

SeverityWarning
ExplanationBecause XAML files are not found, the generation of the intermediate file that will be analyzed cannot be done therefore the analysis results may be incomplete.
User ActionContact CAST Support.

DOTNET.0034

IdentifierDOTNET.0034
Message

Could not generate {0} files from XAML files. The analysis results may be incomplete.", sourceExtension

SeverityWarning
ExplanationThe analyzer can not generate the files from the XAML files that are used for the analysis, therefore the analysis results are incomplete.
User ActionContact CAST Support.

DOTNET.0035

IdentifierDOTNET.0035
Message

Could not generate {0} files from XAML files. The analysis results may be incomplete.", sourceExtension

SeverityWarning
ExplanationThe analyzer can not generate the files from the XAML files that are used for the analysis, therefore the analysis results are incomplete.
User ActionContact CAST Support.

DOTNET.0036

IdentifierDOTNET.0036
Message

Failed to generate code for dataset: {0}. The analysis results may be incomplete.", xsdFile

SeverityWarning
ExplanationThe source code for the dataset ca not be generated. This source code is used in the analysis of the application, therefore the results of the analysis could be incomplete.
User ActionConcact CAST Support.

DOTNET.0037

IdentifierDOTNET.0037
Message

File could not be loaded: {0}. The analysis results may be incomplete.", file.AbsolutePath

SeverityWarning
ExplanationThe file cannot be loaded therefore the results of the analysis can be impacted with missing objects and links.
User ActionContact CAST support.

DOTNET.0038

IdentifierDOTNET.0038
Message

Dependency {dependency project path} not found for project {project path}. The analysis results may be incomplete.

SeverityWarning
ExplanationMising project dependency therefore analysis results may be incomplete.
User ActionAdd missing project.

DOTNET.0039

IdentifierDOTNET.0039
Message

App_Code folder contains both C# code and VB code. Could not create a compilation unit for that folder. The analysis results will be incomplete."

SeverityWarning
ExplanationThe application that is about to be analysed contains both C# and VB .Net source code in the App_Code folder and the analyser cannot create a compilation unit for that folder. All the source code contained in that folder will not be analysed and therefore the resullts will be incomplete.
User ActionReview the application and have sources for only one language in the App_Code folder.

DOTNET.0040

IdentifierDOTNET.0040
Message

Source file is never referenced, and therefore will be ignored: " + source.FullName + ". The analysis results may be incomplete.");

SeverityWarning
ExplanationThe indicated source file is never referenced by any project, therefore the file will not be taken into account during the analysis.
User ActionCheck that the file is used  by a project and if this not the case remove it from the analysis.

DOTNET.0041

IdentifierDOTNET.0041
Message

Source file '{0}' referenced in '{1}' was not found. The analysis results may be incomplete.", codeFile, asmxFile.FullName);

SeverityWarning
ExplanationThe asmx source file indicated was not found. This will impact the result of the analysis.
User ActionCheck that the asmx source file indicated is part of the project and has been included to the delivery.

DOTNET.0042

IdentifierDOTNET.0042
Message

Source file '{0}' referenced in '{1}' was not found. The analysis results may be incomplete.", codeFile, asmxFile.FullName);

SeverityWarning
ExplanationThe source file indicated was not found. This will impact the result of the analysis.
User ActionCheck that the source file indicated is part of the project and has been included to the delivery.

DOTNET.0043

IdentifierDOTNET.0043
Message

Could not load assembly " + assdir.AssemblyName + ". The analysis results may be incomplete.");

SeverityWarning
ExplanationThe indicated assembly could not be loaded. The results of the analysis can be incomplete with fewer objects and links.
User ActionCheck that the assembly is part of the sources and the delivery of the sources has been done without any error and warnings.

DOTNET.0044

IdentifierDOTNET.0044
Message

Source file '{0}' referenced in '{1}' was not found. The analysis results may be incomplete.", srcFile, aspxFile.FullName);

SeverityWarning
ExplanationThe source file referenced has not been found and therefore cannot be analyzed .The result of the analysis will be impacted
User ActionCheck that referenced file is available in the sources and the delivery of the sources has been done without any error or warnings.

DOTNET.0045

IdentifierDOTNET.0045
Message

No 'web.config' found in {0}. The folder is not a website, and will not be analyzed. The analysis results may be incomplete.", projectDesc.Path);

SeverityWarning
ExplanationAs there is not web.config file found the application cannot be considered as an web site and it will not be analysed. The results of the analysis will be incomplete.
User ActionCheck that the application has an web.config file. If that is the case then check that the delivery of the sources has been done without any error and warning.

DOTNET.0046

IdentifierDOTNET.0046
Message

Duplicated project path will be ignored: {0}. The analysis results may be incomplete.", castProject.Path);

SeverityWarning
ExplanationFor the curent analysis there are project with a duplicated path. The duplicated path will be ignored and the results of tha analysis will be incomplete.
User ActionContact CAST Support.

DOTNET.0047

IdentifierDOTNET.0047
Message

Duplicated project path will be ignored: {0}. The analysis results may be incomplete.", castProject.Path

SeverityWarning
ExplanationFor the curent analysis there are project with a duplicated path. The duplicated path will be ignored and the results of tha analysis will be incomplete.
User ActionContact CAST Support.

DOTNET.0048

IdentifierDOTNET.0048
Message

Error while loading XML document '{0}': {1}. The analysis results may be incomplete.", uri, z.Message

SeverityWarning
ExplanationThe XML document could not be loaded as an error has occured therefore the results of the analysis could be incomplete.
User ActionIn the first instance, please ensure that the XML file listed in the error message is syntactically correct and is not empty. If the error persists, then contact CAST Support.

DOTNET.0049

IdentifierDOTNET.0049
Message

Running managed analyzer for .NET languages

SeverityInfo
ExplanationThe analysis of .net languages has started.
User ActionNone

DOTNET.0050

IdentifierDOTNET.0050
Message

Starting analysis of " + project.Path + " (" + (++i) + " / " + nbProjects + ")

SeverityInfo
ExplanationThe analysis of the project has started.
User ActionNone.

DOTNET.0051

IdentifierDOTNET.0051
Message

Cleaning AST objects out of memory

SeverityInfo
ExplanationThe AST objects are cleaned up from memory.
User ActionNone.

DOTNET.0052

IdentifierDOTNET.0052
Message

Visiting file " + document.FilePath

SeverityInfo
ExplanationThe file indicated is being analyzed.
User ActionNone

DOTNET.0053

IdentifierDOTNET.0053
Message

Saving CastIL

SeverityInformation
ExplanationThe CAST Intermediate Language is being saved.
User ActionNone.

DOTNET.0054

IdentifierDOTNET.0054
Message

Calling extensibitity callbacks

SeverityInfo
ExplanationThe operation of calling extensibility callback has started.
User ActionNone

DOTNET.0056

IdentifierDOTNET.0056
Message

End of removing references

SeverityInfo
ExplanationThe operation of removing referenced has ended. No nupkg file was found in the source delivery corresponding to a package reference found in the specified project. This means that no external object from that dependency will be saved and no link will be drawn to it.
User ActionNone.

DOTNET.0057

IdentifierDOTNET.0057
Message

Starting to look for external link entry points (dataflow mode) for " + GetDatabaseAccessName(kind)

SeverityInfo
ExplanationStarting to look for the external links entry points for the specified database.
User ActionNone

DOTNET.0058

IdentifierDOTNET.0058
Message

{x} candidates found, starting external link engine (dataflow mode)", entryPoints.Count

SeverityInfo
ExplanationA number of candidates found for the external links builder. Starting link engine.
User ActionNone

DOTNET.0059

IdentifierDOTNET.0059
Message

Starting to look for external link entry points (grep mode)"

SeverityInfo
ExplanationStarted to look for the external links entry points for the external link builder.
User ActionNone

DOTNET.0060

IdentifierDOTNET.0060
Message

DOTNET.0060:{0} candidates found, starting external links engine (grep mode)", greppedCandidates.Count

SeverityInfo
ExplanationA number of candidates for the external link builder have been found, starting external links engine in grep mode.
User ActionNone

DOTNET.0061

IdentifierDOTNET.0061
Message

{0} candidates found, starting dataflow resolution", filteredGreppedCandidates.Count

SeverityInfo
ExplanationA number of candidates for the external link builder have been found. The dataflow resolution has been started.
User ActionNone

DOTNET.0062

IdentifierDOTNET.0062
Message

DOTNET.0062:IdToSymbol:\t{0}\tIdToProjects:\t{1}\tUsed memory (estimation):\t{2}\t{3}\t{4}

SeverityInfo
ExplanationThe used memory for object in the project indicated.
User ActionNone

DOTNET.0063

IdentifierDOTNET.0063
Message

Project loaded: " + projectPathWithCase

SeverityInfo
ExplanationThe indicated project has loaded.
User ActionNone.

DOTNET.01

IdentifierDOTNET.01
MessageVisiting file " + document.FilePath
SeverityInfo
ExplanationThe file specified is being analyzed.
User ActionNone

DOTNET.0103

IdentifierDOTNET.0103
Message

An exception occurred while generating code for method {method mangling}"

SeverityWarning
Explanation

Error during generation of CASTIL code of specified method, due to limitations of the support of some C# and VB features, mainly lambda functions. It may impact: client/server links, de-virtualization, and user input security.

User ActionNone

DOTNET.0130

IdentifierDOTNET.0130
Message

Memory profile: GC: {0:n0} / Total: {1:n0} / Peak: {2:n0}", GC.GetTotalMemory(gcCollect), p.PrivateMemorySize64, p.PeakWorkingSet64

SeverityInfo
ExplanationThe profile of the memory consumtion is displayed.
User ActionNone

DOTNET.0131

IdentifierDOTNET.0131
Message

Starting to remove references

SeverityInfo
ExplanationThe operation to remove references has started.
User ActionNone

DOTNET.0139

IdentifierDOTNET.0139

Message

Required framework version is {version} but version {local version} will be used instead. Please upgrade your local .NET Framework. Project is: {project path}

SeverityWarning
Explanation

.NET framework version present on the machine is older than the one used in the application. The results may be degraded.

User ActionUpgrade .NET Framework on your analysis machine.

DOTNET.0140

IdentifierDOTNET.0140

Message

Required .Net framework version could not be recognized. Version {version} will be used for analysis of project {project path}

SeverityInfo
Explanation

.NET framework version could not be recognized. The results may be degraded.

User ActionNone

DOTNET.0141

IdentifierDOTNET.0141

Message

Assembly references folder/file {assembly reference path} not found for project {project path}

SeverityWarning
Explanation

The path to the assembly reference leads to a folder or a file that doesn't exist on the machine

User ActionProvide correct path to the assembly reference

DOTNET.0142

IdentifierDOTNET.0142
Message

No ressource found for nuget package {0} version {1}. The corresponding package reference of project {2} will be ignored.", package name, package version, project path

SeverityWarning
Explanation

The project mentioned in the message references a Nuget package for which neither a .nupkg file nor an extraction (see XXX) was found. The impacts are:

  • no link will be drawn to external objects of that package
  • links may be less accurate because of more overload resolution errors
  • dataflow computations (dynamic links, devirtualization, user input security) may be less accurate because of leaks in the generated CASTIL files

Note that some missing package warnings do not affect an analysis, because they do not define programming symbols, they just define tools used at build time and as such they can be ignored. For example, the following can be safely ignored:

  • DOTNET.0142:No resource found for package Microsoft.AspNetCore.Razor.Design. Package reference ignored in project C:\CASTMS\Deploy\DotNetSQLi\SRC\SQLinjection-exposed.csprojSamples of package that can be ignored:
  • DOTNET.0142:No resource found for package Microsoft.VisualStudio.Web.CodeGeneration.Design. Package reference ignored in project C:\CASTMS\Deploy\DotNetSQLi\SRC\SQLinjection-exposed.cspro
  • DOTNET.0142:No resource found for package SerilogAnalyzer : you can ignore, related to analyzer package
  • DOTNET.0142:No resource found for package StyleCop.Analyzers : you can ignore, related to analyzer package
  • DOTNET.0142:No resource found for package Selenium.*" : you can ignore, related to testing tool package

In addition, the following situations will cause a warning to be displayed in the log, however, they can also be safely ignored after investigation:

  • The same reference is found in a .dll that is included in the source code: in this case the only thing to verify is that .dll has been packaged correctly and is referenced in the .NET analysis units. 
  • The same reference is found in a .csproj that is included in the application source code.
User Action

Provide the missing .nupkg file with the sources of the application.

Once downloaded from Nuget Gallery (https://www.nuget.org/), the .nupkg file can be copied at the root of the source code. 

DOTNET.0143

IdentifierDOTNET.0143

Message

{FrameworkKind} project detected. {FrameworkKind} projects are not officially supported. Project is : {ProjectFilePath}.

SeverityInfo
Explanation

.NET framework used here is not supported by the analyzer. The results may be degraded.

User ActionNone

DOTNET.0147

IdentifierDOTNET.0147

Message

Dependency {reference name} not found for project {project path}

SeverityWarning
Explanation

The reference is not found.

 The following situations will cause a warning to be displayed in the log, however, they can also be safely ignored after investigation:

  • The same reference is found in a .dll that is included in the source code: in this case the only thing to verify is that .dll has been packaged correctly and is referenced in the .NET analysis units.
  • The same reference is found in a .csproj that is included in the application source code.
User ActionProvide the missing dll.

DOTNET.0150

IdentifierDOTNET.0150
Message

No definition found for the name 'xxxxx'. Therefore no link will be drawn to that object.

SeverityWarning
Explanation

This message is a summary of messages coming from the C# or VB.NET compiler.

For C#:

  • CS0234 (The type or namespace name 'name' does not exist in the namespace 'namespace')
  • CS0246 (The type or namespace name 'type/namespace' could not be found)
  • CS0103 (The name 'name' does not exist in the current context)

For VB.NET:

  • BC30002 (Type '<typename>' is not defined)
  • BC30456 ('<member name>' is not a member of '<type name>')
  • BC30451 ('name' is not declared. It may be inaccessible due to its protection level)


When several of these compiler messages are emited for the same name, one single message DOTNET.0150 is emited to summarize them. The original compiler messages (CS0234, CS0246, ...) can be obtained by activating debug messages.

These messages are caused by a missing dll, nupkg, or user project.

The impacts are:

  • no link will be drawn to the unresolved object
  • links may be less accurate because of more overload resolution errors
  • dataflow computations (dynamic links, devirtualization, user input security) may be less accurate because of leaks in the generated CASTIL files
User Action

Address first the corresponding DOTNET.0142 Message, if any corresponding.

Provide the missing dll, nupkg file, or user project.

DOTNET.0155

IdentifierDOTNET.0155
MessageUnrecognized format of project file
SeverityWarning
Explanation

Due to the unrecognized file format, the analyzer fails to get any information from project file. Hence the project is skipped (not analyzed).

User ActionContact CAST support
  • No labels