Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [cross-project-issues-dev] [AERI] Using JVMTI to collect local variables in error reports

One thing that immediately comes to mind is that local variables may contain passwords. I think we would, at minimum, need a way for the user to see all of the values they are sharing before sharing them, and it would have to be clear to users when they enable this feature that they are putting their passwords at risk. I wonder if it would be useful to replace the values of string variables with a non-reversible hash.

Cheers,
Sam


--
Sam Davis
Software Engineer, Tasktop Dev
Committer, Eclipse Mylyn
http://tasktop.com

On Tue, Oct 4, 2016 at 2:11 AM, Marcel Bruch <marcel.bruch@xxxxxxxxxxxxxx> wrote:
Greetings cross-projects,

I’d like to post a preliminary plan to this list to see if it will raise any concerns by the community.

As mentioned in a previous post, some automated error reports are hard to triage b/c they lack the (values of the) local variables that lead to an error. We did some research and figured out that we can enrich error reports with the values of all available local variables in each stack trace element by attaching a JVMTI agent to the Eclipse.

Our first experiments were quite promising and I’d like to make this feature available at least in the Eclipse IDE for Committers Package in Oxygen or (if it works properly) in Neon.3 time frame. Certainly this feature has some privacy and performance aspects to consider. W/o going into the technical details, we plan to enable the agent only on explicit user request and send the actual local variable values along with the error reports only if the user actually want’s to share them.


Does anyone on this list have any other concerns or constraints to address/consider when attaching a JVMTI agent to the eclipse process?

Thanks in advance,
Marcel



-- 
Codetrails GmbH
The knowledge transfer company

Robert-Bosch-Str. 7, 64293 Darmstadt

Managing Director: Dr. Marcel Bruch
Handelsregister: Darmstadt HRB 91940


_______________________________________________
cross-project-issues-dev mailing list
cross-project-issues-dev@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev


Back to the top