Analyze FileZilla with Microsoft FxCop 1.36

Question

Hi, I tried to analyze the software security of "FileZilla Server" using Microsoft FxCop 1.36. Firstly, I installed FxCop as a stand-alone application, than I opened the FxCop.exe file and rightclicked the "myFxCop Project" chose "Add targets" and searched for the exe file in the build folder of FileZillaServer. After I found it and selected, I have got an error message saying: "No engine was able to load target FileZillaServer.exe". What does this message mean? Is it possible that FileZillaServer is not a .NET application, though it can be compiled in Visual Studio.

Answer 1

FileZilla does not appear to be a .NET application. It is compilable in Visual Studio because it is written in C++, but native applications cannot be analyzed using FxCop.

Answer 2

Hello Dejvid,

An alternative way to run code analyze on our C++ project: Open our project in Visual Studio 2008, right click the project name and choose Project Only -> Run Code Analysis on Only <our project name>. The warnings will be displayed in the Error List window.

Best regards,

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback, please tell us.
Welcome to the All-In-One Code Framework!

Answer 3

Hi Roahn,
thank you for your answer, I tried to right-click the project name in Visual Studio, but there is no option "Run Code Analysis on Only <our project name>". When I select "Project Only" there are just 4 options available: Build Only, Rebuild Only, Clean Only and Link Only. Do I have to install some source code analyser first in being able to run the "Run Code Analysis on Only.." mode?

Answer 4

Hi,

I'm not sure which edition of Visual Studio did you install,  you may need a higher version of VS. We could manually configure the settings in the latest Visual Studio 2010.  The follow article shows us how to manually enable/disable Automatic Code Analysis for C/C++:
http://msdn.microsoft.com/en-us/library/6yz6c9dy(VS.100).aspx

Best regards,

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback, please tell us.
Welcome to the All-In-One Code Framework!

Answer 5

I am sure, but I think this Analysis Option is available since Visual 2010. I am using MV2008. Did you have to install some separate analysis tool into MV2010, or was it already contained in the installation package of MV2010?

Btw. Please, does anybody know, if there is some free license for Visual Studio 2008 for academic purposes? I am working on a paper for my university about C++ source code analysis tools and one of those can be integrated into Visual Studio 2008. Unfortunately, my 3-months trial period has expired, so I can´t use Visual Studio anymore, but I still need it in order to use the integrated analysis tool.

Answer 6

Hello,

Currently, Visual Studio 2010 is Beta2. We don't need to install any seperate tool into it. Please go to the official site and download the ultimate edition, the option will be there after installation.

For the license issue, you can call 1-800-426-9400, Monday through Friday, 6:00 A.M. to 6:00 P.M. (Pacific Time) to speak directly to a Microsoft licensing specialist, and you can get more detail information from there. You can also visit the following site for more information and support on licensing issues:

http://www.microsoft.com/licensing/mplahome.mspx

Best regards,

---

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback, please tell us.
Welcome to the All-In-One Code Framework!