A static analysis tool Svace as a collection of analyzers with various complexity levels

Abstract

The paper describes a practical approach for finding bugs in the source code of programs using static analysis. This approach allows missing some of the defects. The goal is to find as many defects as possible while minimizing false positives and acceptable analysis time. Various methods of statistical analysis including an analysis based on the abstract syntax tree and data flow analysis were considered. All described algorithms have been implemented in a static analysis tool Svace.

Keywords

• статический анализ
• язык си
• дефекты в исходном коде
• абстрактное синтаксическое дерево
• потоковая чувствительность
• межпроцедурный анализ
• чувствительность к путям
• неконсервативный анализ
• разыменование нулевого указателя
• утечки памяти