Code Analyzers

The author of the article focuses on improving the process of C++ code development. He describes the main things to be considered while analyzing, debugging and enhancing the code. These include using static analysis tools, creating a suite of unit and regression tests and so on. The article is divided into four sections devoted to various techniques and contains code samples.

Integrating static analysis into software development provides the programmer with many advantages. The article reviews the most popular static analysis tools in several classifications including tools for Java analysis, security tools, etc. The authors also focus on various aspects of integrating static analysis such as creation of a coding standard, implementation of automated checking, the process of code review, results retention, managing new and existing code, and training engineers.

Stack overflows might be very dangerous in high-integrity systems and are difficult to detect and debug, so it is very important to prevent them by analyzing the stack beforehand. This article explains how static stack analysis can help accomplish this task and what obstacles can threaten it and also gives some tips on how to use the compiler and special AdaCoreТs GNATstack tool for stack analysis.

The author of this note provides a list of tools for C++ analysis where he describes various commercial and open-source tools. For each item there are a brief description and a link to the related site.

This blog-post concerns the technique of searching bugs in source-code lines of various projects with the help of the new tool Google Code Search. The author explains how one can easily use this tool to detect flaws in code by typing particular expressions and characters in the search line. There are some examples provided that illustrate this technique very clear.

This article will be interesting for every user involved in C++ programming while it describes the authors' effort to investigate the most popular C++ code analyzers on the basis of special rules and sample error patterns to be analyzed by the tools. The description of the testing base and the results are thoroughly commented and shown in various tables and code samples.

Nowadays, when medicine employs complex devices for treating patients, software used in them must be secured from any defects and bugs. The paper concerns static analysis of such software systems. There are several sections that describe the essence of static analysis method, defect classes both common for software development on the whole and specific for medical devices, the task of choosing the best static code analysis tool and factors to consider while making this choice.

Wiki-resource devoted to static code analysis. It describes the essence of this technology and provides a lot of links to other materials on static analysis tools and related domains.

The paper is devoted to Parasoft Corporation's technology BugDetective for flow analysis that provides developers with many benefits such as the possibility of quick modification of code, flexible testing system, focusing on actual defects and errors, etc. The paper describes very thoroughly the working principle of BugDetective and how it can be used in combination with other testing techniques and includes many illustrative code samples and screenshots.