Fast analysis of source code in C and C++

被引:0
|
作者
V. O. Savitskii
D. V. Sidorov
机构
[1] Russian Academy of Sciences,Institute for System Programming
来源
关键词
Source Code; Null Pointer; Open Source Project; Syntax Tree; Incremental Analysis;
D O I
暂无
中图分类号
学科分类号
摘要
Static analysis is a popular tool for detecting the vulnerabilities that cannot be found by means of ordinary testing. The main problem in the development of static analyzers is their low speed. Methods for accelerating such analyzers are described, which include incremental analysis, lazy analysis, and header file caching. These methods make it possible to considerably accelerate the detection of defects and to integrate the static analysis tools in the development environment. As a result, defects in a file edited in the Visual Studio development environment can be detected in 0.5 s or faster, which means that they can be practically detected after each keystroke. Therefore, critical vulnerabilities can be detected and corrected at the stage of coding.
引用
收藏
页码:49 / 55
页数:6
相关论文
共 50 条
  • [21] Fast static analysis of C++ virtual function calls
    Bacon, DF
    Sweeney, PF
    ACM SIGPLAN NOTICES, 1996, 31 (10) : 324 - 341
  • [22] TUAnalyzer - Analyzing templates in C++ code
    Gschwind, T
    Pinzger, M
    Gall, H
    11TH WORKING CONFERENCE ON REVERSE ENGINEERING, PROCEEDINGS, 2004, : 48 - 57
  • [23] Static and dynamic C++ code analysis for the recovery of the object diagram
    Tonella, P
    Potrich, A
    INTERNATIONAL CONFERENCE ON SOFTWARE MAINTENANCE, PROCEEDINGS, 2002, : 54 - 63
  • [24] Experiences reviewing scientific C++ code
    Paterno, M
    ADVANCED COMPUTING AND ANALYSIS TECHNIQUES IN PHYSICS RESEARCH, 2001, 583 : 287 - 290
  • [25] A C++ code library for metabolic modelling
    Abecasis, JPR
    Ferreira, AEN
    FEBS JOURNAL, 2005, 272 : 105 - 105
  • [26] NeuFrame intelligent model C/C++ code generation and embedding
    不详
    FUZZY SETS AND SYSTEMS, 1998, 96 (01) : 127 - 127
  • [28] A C++ data model supporting reachability analysis and dead code detection
    Chen, YFR
    Gansner, ER
    Koutsofios, E
    SOFTWARE ENGINEERING - ESEC/FSE '97, 1997, 1301 : 414 - 431
  • [29] A C++ data model supporting reachability analysis and dead code detection
    Chen, YF
    Gansner, ER
    Koutsofios, E
    IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 1998, 24 (09) : 682 - 694
  • [30] C++ multimedia trilogy: rescued by C++, success with C++, and 1001 C/C++, tips
    Wiatrowski, Claude A.
    Journal of Object-Oriented Programming, 1995, 8 (03):