Release Notes - 8.3.0 - 8.3.15 on Documentation - V2

Release Notes - 8.3.15

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology updates

SAP ABAP

ABAP code previously causing syntax errors during an analysis is now supported. For a full list, see Technology coverage changes in CAST AIP 8.3.x.

User Input Security

Sanitization is no longer defined by simple method names. Now, this sanitization:

is defined by classic blackbox files. These blackbox files are provided by default
is still specialized by technology and quality rule
is specialized for each method parameter

A list of libraries automatically taken in to account for Sanitzation is available in User Input Security - predefined methods.

Release Notes - 8.3.14

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

.NET

Rules

Avoid using untyped DataSet - 7460

The rule Avoid using untyped DataSet - 7460 (which is delivered as part of AIP, rather than the .NET Analyzer extension) has been set as deactivated and detached by default. Therefore after an upgrade to CAST AIP 8.3.14 and the generation of a post-upgrade consistency snapshot, results may differ: the rule will no longer be triggered during an analysis.

Avoid NoSQL injection on MongoDB (C#) - 8418 and Avoid second order SQL injection - 8420

The rulesAvoid NoSQL injection on MongoDB (C#) - 8418 and Avoid second order SQL injection - 8420 (which are delivered as part of AIP, rather than the .NET Analyzer extension) are now set as “critical” by default. Therefore after an upgrade to CAST AIP 8.3.14 and the generation of a post-upgrade consistency snapshot, results may differ: there may be an increase in critical violations and a corresponding decrease in non-critical violations.

Release Notes - 8.3.13

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

.NET Framework 4.7.1 required when using the User Input Security feature

Due to bug fixes and enhancements that have been made in CAST AIP 8.3.13, the .NET Framework 4.7.1 (minimum) must now be present on the analysis machine when the User Input Security feature is enabled during an analysis. This requirement is valid regardless of the technology (JEE or .NET) that is being targeted in the User Input Security feature. If the .NET Framework 4.7.1 (minimum) is not present, then a popup warning will appear during the analysis asking whether you want to install the .NET Framework, therefore blocking the analysis.

Release Notes - 8.3.12

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Mainframe Analyzer - AIBTDLI interface is supported for IMS-DB

In CAST AIP ≥ 8.3.12, the Mainframe Analyzer now supports the AIBTDLI call for the link to PCB (IMS/DB)

This improved support will generate more links between cobol section/paragrpah and pcb from psb file, which will in turn improve the completeness of transaction call graphs used for function point counting.

CAST Upgrade batch file

CASTUpgrade_ServerConnection.txt - PASSWD_CRYPTED option

The option PASSWD_CRYPTED has been removed and it is therefore no longer possible to define an encrypted password for the CAST Storage Service operator user directly in the txt file. See CSSPASSWORD below for more information about how to workaround this.

Release Notes - 8.3.11

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Mainframe Analyzer - improved support for JCL Symbols

In CAST AIP ≥ 8.3.11, the Mainframe Analyzer now supports:

JCL Symbols present in job DD cards
JCL Symbols present in job EXEC cards
Where JCL contains PROCS using parameters from a different JCL
Where JCL calls PROC using a parameter
JCL Symbols present in external PROCS

This improved support will generate more links between steps and programs, files and procedures, which will in turn improve the completeness of transaction call graphs used for function point counting. This is in addition to basic support for JCL Symbols introduced in CAST AIP 8.3.0. You can find out more information about this support in Mainframe - Technical notes.

Release Notes - 8.3.10

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please also see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Upgrade

Upgrade batch file

A new parameter (PSQL_PATH) has been added to the CASTUpgrade_Config.txt file. This optional parameter is used to define the locations of the psql.exe binary that is used to perform the upgrade. See Automating the CAST AIP Upgrade process.

CAST Storage Service maintenance tools

A new parameter -psqlexedir has been added for the following tools:

Release Notes - 8.3.9

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please also see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

SAP PowerBuilder

CAST AIP now supports the analysis of SAP PowerBuilder 2017, 2017 R2 and 2017 R3. There are no changes to the method of support, in other words, the PowerBuilder IDE is still required on the Analysis machine (see PowerBuilder - Required third-party software).

CAST Management Studio GUI

Open Engineering Dashboard option

The existing option Open Engineering Dashboard has been renamed to Open Dashboard. The behavior of the option is exactly as before.

Release Notes - 8.3.8

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Maven discovery limitation removed

The limitation documented here has been removed when using the JEE analyzer with CAST AIP ≥ 8.3.8.

Installation and deployment

CAST Server Manager - CLI

Two new commands have been added - see Automating CAST Server Manager installation tasks for more details.

Info

Note that -INSTALL_CONFIG_FILE and -UPGRADE are deprecated and you should use the above commands instead.

Release Notes - 8.3.7

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Installation and deployment

Storage hosts

CAST AIP schemas can now be installed from scratch on PostgreSQL 10.5 where hosted on a Linux Operating System.

CAST Management Studio

Application editor > Execution tab

The Reports and Logs section now includes a column called “Version” which indicates release of CAST AIP was used to generate the report. If this column is empty when a report is present, this means that the report existed prior to the upgrade to CAST AIP 8.3.7. This column will be filled when a new snapshot is generated (for example the post upgrade consistency snapshot).

Release Notes - 8.3.6

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Installation and deployment

CAST Server Manager

GUI

New display organization for schemas

The grouping of schemas in CAST Server Manager in the left hand panel has been restructured as follows:

Combined Installations (Up-to-date)

Combined Installations (Management, Analysis and Dashboard Service schemas) that are currently up-to-date - i.e. an upgrade is not required.

Release Notes - 8.3.5

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Analysis Units for .NET Core Projects

In previous releases of CAST AIP, the discoverer for .NET ignored .NET projects of type .NET Core. They were discovered but not selected in the package in the CAST Delivery Manager Tool. In CAST AIP ≥ 8.3.5, projects of type .NET Core are now automatically “selected” in the CAST Delivery Manager Tool. As a consequence, when a user performs the Set as Current Version action in the CAST Management Studio, the .NET Core projects are imported and corresponding Analysis Units are created. Therefore, measures such as Lines of Code or Commented Code Lines will increase in a snapshot. Similarly, new quality rule violations can be found in the source code that is now analyzed. The exact impact on analysis results depends on the version of the .NET Analyzer extension that is used for the analysis and the level of support for .NET Core that the extension provides. Please refer to the extension documentation.

Release Notes - 8.3.4

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Dashboard configuration

Encryption of database access credentials

In CAST AIP ≥ 8.3.4, the encryption of database access credentials for use in the context.xml file is now only supported when using Apache Tomcat ≥ 8. Please see Encrypt login and password for database and LDAP for more information.

Engineering Dashboard

Change Language option

Improvements have been made to the Change Language option:

Release Notes - 8.3.3

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Installation and deployment

Renamed WAR files

Continuing with the dashboard re-naming modifications made in CAST AIP 8.3.2 (see Release Notes - 8.3.2), the WAR files have now been renamed as follows:

Previous name	New name
CAST-AAD.war	CAST-Health.war
CAST-AED.war	CAST-Engineering.war
CAST-AAD-AED.war	CAST-Health-Engineering.war

Please ensure that you take note of this and modify any WAR deployment routines you may have. See also:

Release Notes - 8.3.2

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Installation and Deployment

CAST AIP installer (setup)

Three new screens have been added to the CAST AIP installer (setup). These screens are visible only when installing CAST AIP in a non-upgrade scenario (i.e. CAST AIP from the same major/minor release track does not already exist on the machine) and allow you modify the locations for various CAST log, temporary and miscellaneous files. These locations will be valid for all CAST applications. There is no requirement to change these path locations unless you need to - the paths suggested in each screen are the default locations used by CAST AIP. The locations can be overridden once the setup has completed by modifying the CastGlobalSettings.ini file. See Install CAST AIP from setup.

Release Notes - 8.3.1

Mon, 01 Jan 0001 00:00:00 +0000

Feature Improvements

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Upgrade

CAST Server Manager to be used instead of the CAST Update Tool

Changes have been made to CAST Server Manager in an effort to provide one tool that will meet all upgrade requirements: CAST AIP core upgrade and extension upgrade actions are now available for CAST AIP schemas installed with the Combined Installation option through one single menu option:

Release Notes - 8.3.0

Mon, 01 Jan 0001 00:00:00 +0000

Info

Summary: CAST AIP 8.3.0 introduces a number of features and changes as listed below.

Technology support changes

Please see Technology coverage changes in CAST AIP 8.3.x for more detailed discussion of this subject.

Installation and deployment

Storage hosts

CAST highly recommends that you use the CAST Storage Service to host your CAST Analysis/Dashboard/Management Service schemas as it is the “preferred” storage host. See Migrating CAST AIP schemas from Oracle Server and Microsoft SQL Server for more information.
CAST has introduced CAST Storage Service 3 (based on Postgres 9.6.x) and recommends that you use it to onboard new Applications in CAST AIP 8.3.x.

CAST Management Studio Startup Wizard

The CAST Management Studio Startup wizard has been modified so that it is now possible to customize the location of all of the following folders for all newly installed CAST AIP Management Service schemas:

Technology coverage changes in CAST AIP 8.3.x

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

This section lists the major changes that have been made in CAST AIP 8.3.x with regard to specific technologies and how they are delivered and analyzed:

Extensions shipped with CAST AIP 8.3.x and installed as part of the upgrade/new installation

As part of CAST’s drive to improve and speed up the frequency of software releases, a process of “externalizing” the source code delivery and analysis capabilities of CAST AIP has begun in CAST AIP 8.3.x. To this end the following items (official CAST AIP extensions) are shipped with CAST AIP 8.3.x and are installed automatically as part of the upgrade process and also when installing new CAST AIP “triplets”. Please ensure that you read the documentation for these extensions and take note of any Known Issues that may occur.