International Business Machines Corporation

Colin R Penfold

Darren R Beard

Elisabetta Flamini

Ian J Mitchell

Andrew James Osborne

Martin W J Cocks

Helen Maria Witter

Paul Johnson

Jeremy Weaving

Michael John Fish

David Michael Key

Andrew David Clifton

Dai C Middleton

A method and system are provided for code coverage for test systems for testing source code. The method obtains a trace with trace records written at entry and exit to one or more test modules for function calls to the test modules. The method compares response codes for the functions extracted from the trace with a finite list of response codes retrieved from metadata for the source code for the functions and analyzes a code coverage based on the comparison.

Code coverage measurement for test systems

Concepts for acquiring information for identifying a security configuration for an application are proposed. In particular, the information is obtained by running the application in a development environment, detecting security requests made on behalf of the application, and then storing security information associated with the security requests in a security log. Using this concept, a security log may be obtained from which an appropriate security configuration may be determined.

Obtaining information for security configuration

Method and system are provided for capturing task traces for multiple tasks. The method includes capturing in a task trace structure recent trace data entries for a task of multiple tasks segmented into a predefined number of available blocks, wherein a task trace structure is provided for each of multiple tasks in parallel, wherein trace data entries are written to a block with a timestamp of the trace data entries. The method also includes storing in a global trace structure pushed blocks from the multiple task trace structures of older data that exceed the predefined number of blocks of the task trace structures, wherein the blocks are ordered in the global trace structure by the pushed order of the blocks from the multiple task trace structures.

Capturing task traces for multiple tasks

A method, computer system, and a computer program product for instructing the use of application programming interface (API) commands in a runtime environment is provided. The present invention may include receiving, by a computer processor, a source code with a high level language API command. The present invention may include accessing, by a computer processor, metadata for the source code and determining whether the metadata includes an instruction to be applied to the high level language API command, and applying, by a computer processor, the instruction to the high level language API command. The present invention may include processing, by a computer processor, the high level language API command to a low level code using a command translator, wherein the processing occurs after the applying the instruction.

Instructing the use of application programming interface commands in a runtime environment

A single sign-on is implemented in an online transaction processing system. A security token extracted from a transaction request is received. The security token is validated and, in response to a positive validation, security information is extracted. The security information is processed to validate the transaction request and a set of validation attributes is generated. The set of validation attributes is stored in a read-only data object. A transaction server is notified of the read-only data object to authorize processing of the transaction request by the transaction server.

Implementing single sign-on in a transaction processing system

Method and system are provided for capturing task traces for multiple tasks. The method includes capturing in a task trace structure recent trace data entries for a task segmented into a predefined number of available blocks, wherein a task trace structure is provided for each of multiple tasks in parallel, wherein trace data entries are written to a block with a timestamp of the trace data entries. The method also includes storing in a global trace structure pushed blocks from the multiple task trace structures of older data that exceed the predefined number of blocks of the task trace structures, wherein the blocks are ordered in the global trace structure by the pushed order of the blocks from the multiple task trace structures.

A received security token includes first access control attributes and a signature of a first identity provider of a first security domain. Additional access control attributes provided by a second identity provider of a second security domain are added into the received security token. The received security token with the added additional access control attributes is re-signed, with a private key associated with a certificate of a second service provider in the second security domain. The re-signing is an assertion in the second security domain that the added additional access control attributes have been provided by the second identity provider of the second security domain. The re-signed received security token is issued for consuming, using the added additional access control attributes, by any service provider in the second security domain.

Attribute-based access control

A method, system and computer program product for handling a unit of work in a transaction processing system, in which the system comprises one or more production regions operating minimal or no diagnostic functions and one or more diagnostic regions operating maximal or full diagnostic functions. A unit of work is received, which is routed to a production region. After receiving a notification that the work has failed, the work is routed to a diagnostic region.

Providing automatic retry of transactions with diagnostics

Attribute-based access control is performed across a first and a second security domain in a federated distributed processing environment. A security token received in the second security domain from a first service provider in the first security domain includes access control attributes. Access control information associated with a request to process an online transaction in the second security domain is received from an identity provider in the second security domain. The access control information is mapped into access control attributes compatible with a format of the access control attributes of the received security token. The mapped access control attributes are appended to the received security token to create a modified security token. The modified security token is signed with a certificate of a second service provider in the second security domain, and the modified security token is issued for consuming by any service provider in the second security domain.

A transaction processing system is operated. A first resource is locked as a shared resource by a first task executing on a computing device. The first task attempts to lock a second resource as an exclusive resource. The occurrence of a deadlock is ascertained. A second task that wishes to use the locked first resource is identified. A current position of the first task with respect to the first resource is stored. The lock on the first resource is removed. The second task is prompted to use the first resource. The first task locks the first resource as the shared resource. The first task is repositioned with respect to first resource according to the stored position. The first task locks the second resource as the exclusive resource. The first task is performed.

Deadlock avoidance

A method, apparatus and software for processing software code for use in a multithreaded processing environment in which lock verification mechanisms are automatically inserted in the software code and arranged to determine whether a respective shared storage element is locked prior to the use of the respective shared storage element by a given processing thread in a multithreaded processing environment.

Method, apparatus and software for processing software for use in a multithreaded processing environment

A system and method of recognising command related items in a body of object code, such as command names and/or associated option names involves entering a list of required command names and/or option names in programming language form into a filter table. The object code is then scanned for all bit strings potentially representing command names and identifying such names. For each potential command name, succeeding bits are then examined for bits which represent valid options for each said command name so as to further confirm the identity of commands having valid combinations of command names and/or options. Optionally, the command/option syntax may also be checked. The candiate commands, including options, now identified in programming language form are then compared with the entries in the filter table to determine whether or not they match the required list, which may be further refined by use of logical operators.

Growing community of inventors

Ropley, United Kingdom

Colin R Penfold