PI60477: SCANNING OF JAVA CODE USING STRING ANALYSIS RESULTS IN AN ERROR:STRING ANALYSIS FAILED WITH EXIT CODE 1

AppScanSource-Windows-9.0.3.4-fixpack
AppScanSource-Mac-OSX-9.0.3.4-fixpack
AppScanSource-Linux-9.0.3.4-fixpack

APAR status

• Closed as program error.

Error description

• Expected behaviour:
  String Analysis should be performed correctly with the "Enable
  String Analysis to find validator/sanitizer functions" option.
  
  Observed behaviour:
  String Analysis fails with the message: "String Analysis failed
  with exit code 1" when String Analysis is enabled for a Java
  project.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Security Appscan Source on all supported operating       *
  * systems.                                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When String analysis is enabled during scanning of an        *
  * application with IBM Security AppScan source, the scan fails *
  * with exit code 1.                                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Install/Upgrade to AppScan Source 9.0.3.4 to obtain fix for  *
  * this issue.                                                  *
  ****************************************************************
  

Problem conclusion

• The problem code has been fixed in 9.0.3.4 release such that
  String analysis can be performed without this error.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SEC APPSCAN SRC

• Fixed component ID

  5724Z3400

Applicable component levels

• R870 PSY

     UP

• R880 PSY

     UP

• R900 PSY

     UP

• R901 PSY

     UP

• R902 PSY

     UP

• R903 PSY

     UP