Veracode debuts system to test source code
521853
InfoWorld - Veracode launched its Software Security Ratings Service on June 25, introducing its new system for use in testing the safety of applications development among enterprise customers and third-party software makers.
587204
In a new tutorial posted to his blog today, Pierre-Alain Joye shows how to generate backtraces on a Windows machine without the need for a compiler installed.   How to get a back trace on windows without having to compile PHP has been an impossible task for many of us. The difficulty was to first succeed to compile php (given that you have a visual C++ installed). If you are in the middle of a bug hunting session, no need to say that setting up a windows build system is the last thing you like, especially if it is your first time. Thanks to Edin's window binary and MS Diagnostic Debug , it is now possible to have a backtrace in a couple of clicks.   To use the method you will need a few pieces of software to help out but all are available for free. Next up are the steps to get things set up (simple) and the creation of the backtrace to catch the error, complete with screenshots for the whole way. The end result is a nice, pretty error message output to the browser (Internet Explorer) that also dumps the backtrace for you to use.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
150071
On his blog today, Mike Lively has posted about the work h's done to create a database extension for the popular unit testing software for PHP, PHPUnit.   For those that may not have read any of my previous postings on the subject the goal of this software is to extend the functionality of PHPUnit to allow using seed data to put a given database into a known state prior to executing each test. It also provides an easy mechanism to compare database contents with an expected dataset.   Mike has just completed the initial feature set for his project - more or less a port of DBUnit over to PHP. The post includes not only details about this initial release but also code that demonstrates its use. In his example, it's used to validate that a bank account has been created properly by comparng database information before and after the insert.
9691
Sebastian Bergmann has quickly posted about a PHP-GTK testrunner that's been created for PHPUnit:   Tobias Schlitt has announced the development of a PHP-GTK2-based test runner for PHPUnit. It will be part of the upcoming PHPUnit 3.2 release (roadmap). Screenshots are here.   Definitely a welcome addition to an already outstanding unit testing tool - great work Tobias! Check out his blog for more details on how to install the tool and get started testing your apps.
376571
Release makes use of technology from CodeWeavers to let customers run applications from Microsoft.
228292
Marathon is a testing framework for GUI applications developed using Java/Swing. Marathon composes of recorder, runner and editor. The testscripts are composed of python code. Marathon version 0.84 is released, this contains minor feature enhancement and bugfixes. The details can be found in ChangeLog.   Marathon focuses on end-user testing. One need not know Java or Swing to record test scripts using Marathon. Marthon is kept intentionally simple. The aim to produce test scripts that are readable by everyone on the project. This includes the developers, testers and the customers. Marathon is flexible and provides facilities to extend the functionality available through python scripts or through writing ones own component resolvers.  You can find the latest release here: https://sourceforge.net/project/showfiles.php?group_id=46616&package_id=54685
769389
Latest PHPClasses.org Releases:Class TreeviewPHP User ClassDHTMLDumpSalatCSV Parse and ReadRSAsmb4phpClient infoTrue Singleton ClassRounded Border Table Generator
199556
(InfoWorld) - With virtualization growing in popularity, Borland Software and VMWare are partnering to accommodate the unique application testing needs presented by this paradigm. Both companies are introducing product upgrades that can function with each other. Borland is announcing its SilkCentral Test Manager 2007 software testing package while VMware is offering VMware Lab Manager 2.5, which is an image library management and provisioning system for virtual machine images. SilkCentral Test Manager 2007 features UI-level integration with Lab Manager 2.5. With the integration of the two products, applications can be tested across multiple configurations, Borland said. Users can assign individual tests to run on many different configurations or platforms without having to maintain multiple hardware configurations that otherwise would be needed for testing. "We've integrated with Lab Manager so that when a quality engineer using SilkCentral Test Manager as their test management interface wants to deploy a test on multiple configurations, they can do so with their virtualized environment by leveraging Lab Manager integration," said Brad Johnson, Borland director of product marketing for lifecycle quality management products. "They don't have to leave the SilkCentral Test Manager interface. "What Lab Manager does is it sets up the environment for the test automatically and SilkCentral can perform the tests," said James Phillips, senior director of software lifecycle automation at VMware. Johnson pointed out the necessity of testing applications based on each platform. "When QA organizations test applications, they have to test multiple configurations," Johnson said. It is expensive to maintain separate hardware stacks for configuration testing, he said. With the Borland-VMware combination, tests can be provisioned in minutes rather than days, according to Borland. "You can run tests on different virtualized configurations just as if they were physical configurations," Johnson said. The value of virtualization, he said, is users can have different environments deployed on one virtualized server. "We're embracing the fact that virtualization is quite ubiquitous in IT shops today," Johnson said. Virtual test lab management presents an "incredible opportunity for developers and testers alike," said Carey Schwaber, senior analyst at Forrester Research. "Testers understand that they have a problem, and they often spend upwards of a third of their time trying to manage test environments," Schwaber said. "Dabbling with virtual machines here and there doesn't get you nearly the savings that you can accrue with a virtual test lab management solution. The opportunity for developers is different. Most of them don't even know that they could be building in a production-like environment." Also new in SilkCentral Test Manager 2007 is enhanced requirements testing tied to business requirements. New features in Lab Manager 2.5 include support for iSCSI and NFS storage as well as administration capabilities for cleaning up a storage library. VMware also is offering an ROI calculator to calculate return on investment from using the product. Silk Central Test Manager 2007 pricing starts at $1,700 per seat license for named users. Availability is anticipated in the third quarter of 2007. Lab Manager 2.5, which ships on Monday, starts in price at $15,000. Pricing for a bundle of Lab Manager 2.5 and VMware Infrastructure 3 starts at $35,000. Infrastructure 3 is VMware's core technology for slicing up a server into virtual machines.
688297
Veracode launched a new version of its binary code analysis service on Monday that focuses specifically on helping software engineers find potential backdoor vulnerabilities in their programs.
336156
Open-source database to jump from beta testing to production within three months.
17749
Blog: The software maker has a testy back and forth with a software maker that has created a utility that interacts with the free version of Visual Studio.
757749
On the PHPKitchen site today, Demian Turner looks at a handy utility to ensure that the coding standards in your documents are all passable - PHP_CodeSniffer.    There was a fantastic CS helper package released at PEAR this week, PHP_CodeSniffer. The package, which requires PHP5 and is nicely coded, puts a phpcs script in your path so you can pass files or directories to it to get your CS validated.   The results are detailed and processing is surprisingly fast considering how many tokens are being parsed.    Demian gives an example of what the validation process looks like and why he finds the entire package particularly useful.
754440
From the Inside Open Source APress blog, there's a new post by Michael Stahnke documenting his search for a useful way to work with configuration files in a PHP application.   Recently I was working on developing an application that required a configuration file to setup. [...] XML is too hard to read for management-types. Plain text wasn't all that easy to handle from a code perspective. Then I remembered that when I played with Ruby on Rails it used something called YAML, and thought I'd give that go.   Searching around, he discovered the spyc library that aids in the YAML development and, as suggested by a commentor, the standards-compliant extension syck.
763048
Borland has unveiled a software suite designed to help developers eliminate errors before their code can be checked in.
507569
InfoWorld - On Aug. 14, IT security training and research authority SANS Institute will convene its inaugural set of exams for software developers seeking to attain its new secure coding certifications. The rise of such initiatives -- and increasing adoption of source code vulnerability scanning tools among internal software development teams -- are finally making a difference in overall applications security, some end users and industry experts contend.
720296
(InfoWorld) - Borland Software on Tuesday will refresh the Silk application testing product line it acquired last year. Available now, the R 2006 Release 2 versions of the Silk products include: SilkCentral Test Manager, which is a J2EE framework for managing processes; SilkPerformer for load testing, and SilkTest for test automation. "This release focuses a lot on improving the process of testing," with incremental enhancements, said Brad Johnson, Borland product marketing director for lifecycle quality management. The Silk line "provides a quality framework that looks at software quality in a very holistic view from the beginning of the development cycle to when the applications are delivered," Johnson said. Featured in Test Manager is an Eclipse-based client that allows for manual testing of applications. "It's a small Eclipse application that enables manual testers to be given the direction and steps theyâre supposed to execute, the pass-fail criteria," said Johnson.Â  With manual testing, the user validates each step rather than using automation. The new client in Test Manager allows for testing to be done offline and be reported back to the test management console. Previously, manual testing in Test Manager required a Web interface. Manual testing can account for nearly 85 percent of testing efforts, Borland said. But it often has required an inefficient process utilizing Word documents and e-mail. Borland is looking to streamline this form of testing. Test Manager also features code coverage capabilities that connect code to a specific test so that when code changes, testers know which tests to modify. Test Manager now ships with integrated support for the Borland Gauntlet product, providing visibility and control over the early stages of developer testing. By adding Eclipse support, Borland is taking a step toward moving the product to support industry standards, said Carey Schwaber, senior analyst at Forrester Research. "I think any support for Eclipse is a good thing," Schwaber said. However, the proprietary scripting environment in Test Manager does not yet go away, she said. SilkPerformer offers improved monitoring through use of Java Management Extensions technology. "It lets us deploy the common Java servers from [BEA Systems] WebLogic, [IBM] WebSphere, and so forth," Johnson said. "It gives us deeper visibility." A new Eclipse plugin in SilkPerformer allows performance test development to be done within the Eclipse IDE. SilkTest adds support for Windows Vista so users can test applications developed for Vista at the UI level. "Every single testing vendor really needs to have support for Vista because one of the things that Vista introduces is the need to retest your applications," when migrating from other platforms, Schwaber said. "Our data show that people will be doing these migrations for the next couple of years." Other environments supported by SilkTest include Windows XP 64-bit operating systems, Internet Explorer 7.0, and .Net. SilkCentral Test Manager starts in price at $1,700 per named user, while SilkTest pricing begins at $4,500 per named user. SilkPerformer prices begin at roughly $10,000 per user. Borland acquired the Silk product line when it bought Segue Software in 2006.