A static analysis tool Svace as a collection of analyzers with various complexity levels

Alexey Evgenevich Borodin, A. Belevancev · Proceedings of the Institute for System Programming of RAS · 2015

The paper describes a practical approach for finding bugs in the source code of programs using static analysis. This approach allows missing some of the defects. The goal is to find as many defects as possible while minimizing false positives and acceptable analysis time. Various methods of statistical analysis including an analysis based on the abstract syntax tree and data flow analysis were considered. All described algorithms have been implemented in a static analysis tool Svace.

Read the paper · More papers on PaperTik