PI65531: SCANNING OF A VS SOLUTION WITH VB.NET FILES THROWS A LOG4J NOT FOUND WARNING

APAR status

• Closed as Permanent restriction.

Error description

• What's expected:
  
  IBM Security AppScan Source should be able to scan VS asp.net
  solution that contains both .js and .vb files successfully and
  returning satisfactory results.
  
  What's noticed:
  
  Customer has a Visual Studio solution of asp.net projects that
  contains several .js, .aspx and .vb files.  During scanning of
  the application when it completes scanning of one particular
  file called <filename>.vb it throws a warning like:
  
  log4j:WARN No appenders could be found for logger
  (net.htmlparser.jericho).
  log4j:WARN Please initialize the log4j system properly.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users may notice a warning about Log4J while scanning their  *
  * VB.Net code                                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When scanning VB.Net code using IBM Security AppScan Source, *
  * users sometimes may notice a warning like:                   *
  * log4j:WARN No appenders could be found for logger            *
  * (net.htmlparser.jericho).                                    *
  * log4j:WARN Please initialize the log4j system properly       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• On further investigation we noticed this warning may be a result
  of some required dependencies missing and this can be easily
  ignored because it just indicates the Logging system is not
  configured correctly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels