Fast analysis of source code in C and C++

被引:0
|
作者
V. O. Savitskii
D. V. Sidorov
机构
[1] Russian Academy of Sciences,Institute for System Programming
来源
关键词
Source Code; Null Pointer; Open Source Project; Syntax Tree; Incremental Analysis;
D O I
暂无
中图分类号
学科分类号
摘要
Static analysis is a popular tool for detecting the vulnerabilities that cannot be found by means of ordinary testing. The main problem in the development of static analyzers is their low speed. Methods for accelerating such analyzers are described, which include incremental analysis, lazy analysis, and header file caching. These methods make it possible to considerably accelerate the detection of defects and to integrate the static analysis tools in the development environment. As a result, defects in a file edited in the Visual Studio development environment can be detected in 0.5 s or faster, which means that they can be practically detected after each keystroke. Therefore, critical vulnerabilities can be detected and corrected at the stage of coding.
引用
收藏
页码:49 / 55
页数:6
相关论文
共 50 条
  • [41] C/C++ COMPILERS BRING FASTER CODE CRUNCHING TO PC PLATFORMS
    CHILD, J
    COMPUTER DESIGN, 1992, 31 (04): : 129 - 133
  • [42] C SOURCE CODE OBFUSCATOR
    Durfina, Lukas
    Kolar, Dusan
    KYBERNETIKA, 2012, 48 (03) : 494 - 501
  • [43] CSteg:: Talking in C code -: Steganography of C source code in text
    Blasco Alis, Jorge
    Cesar Hernandez-Castro, Julio
    Tapiador, Juan M. E.
    Ribagorda Garnacho, Arturo
    SECRYPT 2008: PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON SECURITY AND CRYPTOGRAPHY, 2008, : 399 - 406
  • [44] Study of State-of-the-art Open-source C/C++ Static Analysis Tools
    Li G.-W.
    Yuan T.
    Li L.
    Ruan Jian Xue Bao/Journal of Software, 2022, 33 (06): : 2061 - 2081
  • [45] WATCOM C++ AND MACINTOSH C++
    STEVENS, A
    DR DOBBS JOURNAL, 1993, 18 (10): : 133 - 136
  • [46] ADVANTAGE C++ AND GUIDELINES C++
    MALLETT, M
    BYTE, 1987, 12 (11): : 229 - &
  • [47] Static analysis of C/C++ program for safety
    Software Engineering Inst., Xidian Univ., Xi'an 710071, China
    Xi Tong Cheng Yu Dian Zi Ji Shu/Syst Eng Electron, 2008, 6 (1155-1158):
  • [48] Compositional analysis of C/C++ programs with VeriSoft
    Dingel, Juergen
    ACTA INFORMATICA, 2006, 43 (01) : 45 - 71
  • [49] Compositional Analysis of C/C++ Programs with VeriSoft
    Juergen Dingel
    Acta Informatica, 2006, 43 : 45 - 71
  • [50] Scopira: an open source C++ framework for biomedical data analysis applications
    Demko, Aleksander B.
    Pizzi, Nick J.
    SOFTWARE-PRACTICE & EXPERIENCE, 2009, 39 (06): : 641 - 660