Fast analysis of source code in C and C++

被引:0
|
作者
V. O. Savitskii
D. V. Sidorov
机构
[1] Russian Academy of Sciences,Institute for System Programming
来源
关键词
Source Code; Null Pointer; Open Source Project; Syntax Tree; Incremental Analysis;
D O I
暂无
中图分类号
学科分类号
摘要
Static analysis is a popular tool for detecting the vulnerabilities that cannot be found by means of ordinary testing. The main problem in the development of static analyzers is their low speed. Methods for accelerating such analyzers are described, which include incremental analysis, lazy analysis, and header file caching. These methods make it possible to considerably accelerate the detection of defects and to integrate the static analysis tools in the development environment. As a result, defects in a file edited in the Visual Studio development environment can be detected in 0.5 s or faster, which means that they can be practically detected after each keystroke. Therefore, critical vulnerabilities can be detected and corrected at the stage of coding.
引用
收藏
页码:49 / 55
页数:6
相关论文
共 50 条
  • [1] Fast analysis of source code in C and C plus
    Savitskii, V. O.
    Sidorov, D. V.
    [J]. PROGRAMMING AND COMPUTER SOFTWARE, 2013, 39 (01) : 49 - 55
  • [2] C++ Source Code Rejuvenation for an Improved Exception Specification
    Fulop, Endre
    Gyen, Attila
    Pataki, Norbert
    [J]. IPSI BGD TRANSACTIONS ON INTERNET RESEARCH, 2023, 19 (01): : 17 - 22
  • [3] Writing fuzzy rules directly in a C++ source code
    deOliveira, MC
    Facury, MAR
    [J]. FUZZ-IEEE '96 - PROCEEDINGS OF THE FIFTH IEEE INTERNATIONAL CONFERENCE ON FUZZY SYSTEMS, VOLS 1-3, 1996, : 522 - 528
  • [4] Mining design patterns from C++ source code
    Balanyi, Z
    Ferenc, R
    [J]. INTERNATIONAL CONFERENCE ON SOFTWARE MAINTENANCE, PROCEEDINGS, 2003, : 305 - 314
  • [5] Keeping C/C++ code scalable
    Krauss, KJ
    [J]. DR DOBBS JOURNAL, 2006, 31 (03): : 28 - +
  • [6] Bulletproofing C++ code
    Sokolov, Sergei
    [J]. DR DOBBS JOURNAL, 2007, 32 (02): : 37 - 42
  • [7] OPTIMIZING C++ CODE
    BRIGHT, W
    [J]. DR DOBBS JOURNAL, 1995, 20 (08): : 88 - 89
  • [8] Performance testing C++ code
    Hunt, N
    [J]. JOURNAL OF OBJECT-ORIENTED PROGRAMMING, 1996, 8 (08): : 22 - 25
  • [9] Statically testing C++ code
    Milanesi, Carlo
    [J]. DR DOBBS JOURNAL, 2008, 33 (02): : 66 - 70
  • [10] Pteros: Fast and easy to use open-source C++ library for molecular analysis
    Yesylevskyy, Semen O.
    [J]. JOURNAL OF COMPUTATIONAL CHEMISTRY, 2012, 33 (19) : 1632 - 1636