Fast analysis of source code in C and C++

被引:0
|
作者
V. O. Savitskii
D. V. Sidorov
机构
[1] Russian Academy of Sciences,Institute for System Programming
来源
关键词
Source Code; Null Pointer; Open Source Project; Syntax Tree; Incremental Analysis;
D O I
暂无
中图分类号
学科分类号
摘要
Static analysis is a popular tool for detecting the vulnerabilities that cannot be found by means of ordinary testing. The main problem in the development of static analyzers is their low speed. Methods for accelerating such analyzers are described, which include incremental analysis, lazy analysis, and header file caching. These methods make it possible to considerably accelerate the detection of defects and to integrate the static analysis tools in the development environment. As a result, defects in a file edited in the Visual Studio development environment can be detected in 0.5 s or faster, which means that they can be practically detected after each keystroke. Therefore, critical vulnerabilities can be detected and corrected at the stage of coding.
引用
收藏
页码:49 / 55
页数:6
相关论文
共 50 条
  • [31] CLEAN++: Code Smells Extraction for C++
    Mashiach, Tom
    Sotto-Mayor, Bruno
    Kaminka, Gal
    Kalech, Meir
    [J]. 2023 IEEE/ACM 20TH INTERNATIONAL CONFERENCE ON MINING SOFTWARE REPOSITORIES, MSR, 2023, : 441 - 445
  • [32] Writing good C++ code for embedded apps
    Walls, Colin
    [J]. Electronic Engineering Times, 2005, (1399)
  • [33] Porting C++ code from NT to UNIX
    Frazier, GF
    [J]. DR DOBBS JOURNAL, 1999, 24 (04): : 84 - +
  • [34] Embedded C++ key to smaller and faster code
    [J]. Electron World, 2006, 1840 (20-25):
  • [35] Embedded C++ key to smaller and faster code
    Haden, M
    [J]. ELECTRONICS WORLD, 2006, 112 (1840): : 20 - 25
  • [36] ITS4: A static vulnerability scanner for C and C++ code
    Viega, J
    Bloch, JT
    Kohno, Y
    McGraw, G
    [J]. 16TH ANNUAL COMPUTER SECURITY APPLICATIONS CONFERENCE, PROCEEDINGS, 2000, : 257 - 267
  • [37] Runtime Countermeasures for Code Injection Attacks Against C and C++ Programs
    Younan, Yves
    Joosen, Wouter
    Piessens, Frank
    [J]. ACM COMPUTING SURVEYS, 2012, 44 (03)
  • [38] DIMENSIONAL ANALYSIS WITH C++
    CMELIK, RF
    GEHANI, NH
    [J]. IEEE SOFTWARE, 1988, 5 (03) : 21 - 27
  • [39] Client/server C++: Write fast, run fast
    Grehan, R
    [J]. BYTE, 1997, 22 (03): : 139 - &
  • [40] C/C++ COMPILERS BRING FASTER CODE CRUNCHING TO PC PLATFORMS
    CHILD, J
    [J]. COMPUTER DESIGN, 1992, 31 (04): : 129 - 133