On this page:
CAST AI Administrator
Summary: this page lists:
All changes in results related to extensions are now listed in the extension documentation and will not appear in this page.
2586 Utilization of "DoEvents" inside a loop has been disabled
The VisualBasic rule 2586 Utilization of "DoEvents" inside a loop has been disabled out of the box in this release of CAST AIP. This means that:
In previous releases of CAST AIP, support of the API org.springframework.jdbc for the User Input Security feature relied on automatic blackboxing. In CAST AIP ≥ 8.3.23, this has now changed and static rules will be used instead. As a result of these changes, some impact to existing results is to be expected when re-analyzing existing source code with the User Input Security feature: additional positive violations of related rules are likely, therefore changing grades but providing improved accuracy.
A bug has been fixed which was causing varying numbers of violations to be displayed for certain User Input Security related rules between two consecutive snapshots of the same application with unchanged source code. This was due to a bug causing different paths to be calculated for a given entrypoint. As a results of this fix, some impact to existing results is to be expected when re-analyzing existing source code with the User Input Security feature: number of violations may change again, but will be stable in future snapshots.