Lucent Sky AVM 4.3 release information

2018/12/26 |

This article includes a list the new features and bug fixes that are included in Lucent Sky AVM 4.3, as well as known issues of this release.

For more information about this release, visit the blog post Lucent Sky AVM 4.3 released.

Updates in Lucent Sky AVM 4.3

  • Second-generation source code analysis engine (second phase) - The second-generation source code analysis engine is an overhaul of the source code flow analysis engine and the contextual analysis engine. In the second phase, the primary focus is code analysis accuracy and scalability. The second-generation engine now analyzes over 12 times more source code information than the current, first-generation engine. This allows for greatly improved accuracy in source code analysis, contextual analysis and the resulting remediation. However, a temporary downside is that a typical scan will now take about 20-30% additional time to complete. We expect the performance to gradually improve over the next few releases. The second-generation source code analysis engine is currently only available when preview is enabled.

  • Bug fixes - Several bugs were fixed in this release, including a bug affecting the scanning performance on certain Intel processors, and bugs in the CLI and the web UI.

List of fixes included in Lucent Sky AVM 4.3

Scans of Android and iOS applications seem stuck at S-1 for an extended period of time

While most scans pass the S-1 stage in less than a minute, Android, and iOS applications seem to stuck at S-1 for an extended period of time. In the meantime, CLEAR Engine log files show that stage S-1 is already completed. This is due to a bug in the CLI and web UI, causing the incorrect scan progress to be retrieved. The impact of this issue is strictly cosmetic.

This issue has been resolved in Lucent Sky AVM 4.3.

Scan performance is worse than previous versions on systems with certain Intel processors

The scan performance is worse than previous versions on systems with certain Intel processors. The average scan time is about 30% longer compared to Lucent Sky AVM 4.1.1. This is due to a bug in the optimization process for Intel processors based on the Haswell and later microarchitectures.

This issue has been resolved in Lucent Sky AVM 4.3.

Known issues of Lucent Sky AVM 4.3

Scan created using the CLI does not inherit project file from its application

When creating a scan using the CLI, the scan does not inherit project file set in its application. This is due to a bug in the CLI, and affects versions between 4.0 and 4.3.

This issue is expected to be resolved in Lucent Sky AVM 4.5.