OWASP Navigation

Archive for May, 2007

Orizon v0.21-b59 is available

Tuesday, May 15th, 2007

A maintenance release is available in the v0.20 Orizon tree. This release adds log4j support over the API code.

As far as OrizonTest class will be available, log4j will be distributed with inside Orizon JAR. In the future will be up to the tool using Orizon to provide log4j JAR file.

Logging support and having a cup of milk…

Tuesday, May 15th, 2007

Today I committed over Orizon SVN repository @ sourceforge.net, Orizon v0.21-b59 that uses log4j instead of System class facilities.

Orizon v0.20-b26 is available

Monday, May 7th, 2007

It’s a pleasure to me to announce that next minor release version of Orizon tool is available by now at SourceForge page.

This release has stated before in the blog, is the first release using JDK6 compiler APIs to parse java sources. Parsing is done with more precision this way. It was also possible to start adding very simple but tied to code check as empty catch blocks in exception handling.

Orizon is still far away to being an usable API for building source code review tools, but I think we are walking the right way.

Until today, 101 people downloaded orizon… I would like to thank all of those and saying to keep trying new releases and keep sending me feedback and suggestions. I would like to invite people joining the project too or at least sending me a postcard as support :)

Orizon 0.20 brench will be the last containing OrizonTest class, starting from 0.30 release, Orizon will direct to the primary project goal, being an API. An ad hoc project will be created in the very near future to implement orizon API and realize a source code review assessment tool.

So, let’s stop talking… enjoy the new Orizon release

Slante!

Orizon v0.20 is in the air…

Thursday, May 3rd, 2007

Friends, it sounds like a good start for the spring is coming… using JDK6 compiler API provided by Sun, I was able to access data from parsed java source…

I think in the weekend I’ll complete <code>Java2XML</code> and I’ll release version 0.20 which in my idea will be able to understand even complex Java sources (no innerclass support by now) and apply some trivial check.

Next big step will be adding checks and make a consistent API for parsing non Java sources. Helper programs for dynamic analysis are created and compiled by now… so in the future releases attention will be directed to fuzzy input generation to perform dynamic analysis…

An online demo using Orizon will follow ASAP…