PM76026: ASE 8.6.0.1 skips Flash files: [Skipping flash file (Unsupported flash file)]: [...] (swf version -, action script -)

IBM Security AppScan Enterprise 8.7 now available

APAR status

• Closed as program error.

Error description

• ASE 8.6.0.1 skips Flash files as unsupported. The Scan Log shows
  entries like:
  
  [0029] | [date time] | [CRWAE1068I] Skipping flash file
  (Unsupported flash file): http://(...)/file.swf (swf version -,
  action script -)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  AppScan Enterprise wasn't able to load the movie for various
  reasons. One was that the movie contained a problematic GUI
  instance that kept changing and this interfered with
  AppScan's process of learning how the movie works and
  getting full coverage.
  

Problem conclusion

• A new engine option was added:
  EXECUTE_FLASH_EXCLUDE_INSTANCES_TARGETS. This option defines
  problematic GUI instances that should be excluded from Flash
  scans. Fixed in version 8.7
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SEC APPSCAN ENT

• Fixed component ID

  5724T5200

Applicable component levels

• R860 PSN

     UP