Changes in results post upgrade - 8.3.39

Created by James Hurrell on Nov 01, 2021

Summary:

  • Impacts of changes made to AIP Core 8.3.39 on Quality Model results post upgrade

  • Other impacts of changes made in AIP Core 8.3.39

All changes in results related to extensions are listed in the extension documentation and will not appear in this page.

User Input Security - .NET

.NET MVC applications

A bug introduced in AIP Core 8.3.38 has been fixed in this release. The bug caused implicit blackboxing to not function for .NET MVC applications and therefore less true violations were reported in AIP Core 8.3.38 in comparison to AIP Core 8.3.37 when analyzing the same source code. The fix ensures that the behaviour of AIP Core 8.3.39 now matches AIP Core 8.3.37 and as a result, more violations may be reported in comparison to AIP Core 8.3.38.

Natural metrics - added and removed violations

Avoid Artifacts with high Commented-out Code Lines/Code Lines ratio (7126) and Avoid Too Many Copy Pasted Artifacts (7156)

After upgrade to AIP Core 8.3.39 and the generation of a new analysis/snapshot on unchanged source code, changes to the the results produced by these quality rules may be evident:

  • Avoid Artifacts with high Commented-out Code Lines/Code Lines ratio (7126) > a decrease in reported violations

  • Avoid Too Many Copy Pasted Artifacts (7156) > an increase in reported violations

This behaviour is due to a change in the source code compilation engine used by CAST and as a result, grades of existing applications may be impacted.