Fast analysis of source code in C and C++

被引:0
|
作者
V. O. Savitskii
D. V. Sidorov
机构
[1] Russian Academy of Sciences,Institute for System Programming
来源
关键词
Source Code; Null Pointer; Open Source Project; Syntax Tree; Incremental Analysis;
D O I
暂无
中图分类号
学科分类号
摘要
Static analysis is a popular tool for detecting the vulnerabilities that cannot be found by means of ordinary testing. The main problem in the development of static analyzers is their low speed. Methods for accelerating such analyzers are described, which include incremental analysis, lazy analysis, and header file caching. These methods make it possible to considerably accelerate the detection of defects and to integrate the static analysis tools in the development environment. As a result, defects in a file edited in the Visual Studio development environment can be detected in 0.5 s or faster, which means that they can be practically detected after each keystroke. Therefore, critical vulnerabilities can be detected and corrected at the stage of coding.
引用
收藏
页码:49 / 55
页数:6
相关论文
共 50 条
  • [1] Fast analysis of source code in C and C plus
    Savitskii, V. O.
    Sidorov, D. V.
    PROGRAMMING AND COMPUTER SOFTWARE, 2013, 39 (01) : 49 - 55
  • [2] A Comparative Study of Static Code Analysis tools for Vulnerability Detection in C/C++ and JAVA Source Code
    Kaur, Arvinder
    Nayyar, Ruchikaa
    Procedia Computer Science, 2020, 171 : 2023 - 2029
  • [3] C++ Source Code Rejuvenation for an Improved Exception Specification
    Fulop, Endre
    Gyen, Attila
    Pataki, Norbert
    IPSI BGD TRANSACTIONS ON INTERNET RESEARCH, 2023, 19 (01): : 17 - 22
  • [4] Writing fuzzy rules directly in a C++ source code
    deOliveira, MC
    Facury, MAR
    FUZZ-IEEE '96 - PROCEEDINGS OF THE FIFTH IEEE INTERNATIONAL CONFERENCE ON FUZZY SYSTEMS, VOLS 1-3, 1996, : 522 - 528
  • [5] Mining design patterns from C++ source code
    Balanyi, Z
    Ferenc, R
    INTERNATIONAL CONFERENCE ON SOFTWARE MAINTENANCE, PROCEEDINGS, 2003, : 305 - 314
  • [6] Keeping C/C++ code scalable
    Krauss, KJ
    DR DOBBS JOURNAL, 2006, 31 (03): : 28 - +
  • [7] Keeping C/C++ code scalable
    Rational Software Division, IBM
    Dr Dobb's J, 3 (28-34):
  • [8] Bulletproofing C++ code
    Sokolov, Sergei
    DR DOBBS JOURNAL, 2007, 32 (02): : 37 - 42
  • [9] OPTIMIZING C++ CODE
    BRIGHT, W
    DR DOBBS JOURNAL, 1995, 20 (08): : 88 - 89
  • [10] VulnMiner: A comprehensive framework for vulnerability collection from C/C++ source code projects
    Bhandari, Guru
    Gavric, Nikola
    Shalaginov, Andrii
    SOFTWARE IMPACTS, 2024, 22