Bill Pugh
(side note: compiling with "-target jsr14" will allow us to use generics
and compile to JDK 1.4 usable code)
Static analysis
Analyzes program w/out executing
Not a replacement for testing
Find bugs that are one step removed from a syntax error
Finding different categories of problems
"Embrace and fix your dumb mistakes"
Bad method calls: not using return parameters, not throwing newly
constructed exceptions,
etc.
OpenJPA 38 issues (35 critical)
Checks for null when subsequent actions would cause an NPE (numerous found
in OpenJPA)
Bad practices, like hashCode() w/out equals()
Feedback about API-specific findbugs detectors (e.g., for JPA) would be
appreciated
OpenJPA is "good" to "average" in the number of bugs found.
OpenJPA:
SimpleDateFormat is not thread-safe
