Static Analysis

Why are code conventions important
- 80 of lifetime cost for software is maintenance
- Hardly any software is maintained by original author
- Improves readability for better understanding
Convention examples
- all private variables begin with _
- Notation (camel case, hungarian, underscore)
- Code indentation
Code style checking tool examples
- cpplint.py (C++)
- vera++ (C++)
- KWStyle (C++)
- cxxchecker (C++)
- StyleCop (.NET)
- checkstyle (Java)
What is static program analysis

Analysis of software without running it
What can static analysis be performed on?
- Source code
- Object code
Names for the process of manually reading through code
- Static analysis
- Program comprehension/understanding
- Code review
Organizations that require static analysis
- FDA for medical devices
- Health and safety for nuclear reactor protection (UK)
What do static analysis tools check for
- Correctness
- Library design
- Naming conventions
- Performance
- Security
- Internationalization and localization
Static analyzer examples
- Lint (C)
- cppchck (C++)
- FxCop (.NET)
- FindBugs (Java)
- PMP (Java)
- Soot (Java)

Author

Ant

353589

Card Set

Static Analysis

Description

stat

Updated

2020-10-25T04:34:26Z

Show Answers