Coverity Uncovers Concurrency Errors



Email    print   
February 1, 2006 —  San Francisco-based Coverity has updated its source code analyzer, enabling it to detect errors associated with concurrent programming.

Prevent 3.2, which the San Francisco-based company announced late last year, finds errors such as double locks, missing locks and incorrect lock ordering in C/C++ source code, said Coverity product manager Andy Yang. “They are not everyday types of bugs. But when they happen, they are hard to track down.”

Locks and unlocks are used to manage shared functions, variables and resources in applications that execute multiple threads concurrently. Applying locks and unlocks effectively in complex applications is difficult and requires a high degree of developer skill, said Yang. Errors are typically the result of incorrect use, he said. Prevent addresses such errors by tracking, for example, how a piece of memory is locked by function. It can follow complex paths through the code to find errors such as a missing unlock, or a lock that has been applied twice, or in the wrong order, said Yang. The tool identifies and provides information about errors, and recommends fixes.

Also new to 3.2 is integration with the Eclipse framework, IBM Rational Software Development Platform and Wind River Workbench IDE, as well as more detailed reports, which can compare, for example, defect rates across multiple builds and releases, said Yang.

A key reason why concurrent programming errors are hard to detect is that they are difficult to reproduce in the testing process. They typically don’t manifest themselves until the application is deployed, said Yang. By scanning source code, Prevent can help detect such errors early in the development process. “But we are not saying we can find all concurrency problems. That is impossible,” he said.

Coverity competitor Fortify, in Palo Alto, Calif., also can pinpoint problems associated with concurrent programming, including double locks and race conditions, which can occur when threads of operation contend for the same resources, said Fortify CTO Roger Thornton. Source code analysis is not the only way to find concurrent errors. For instance, testing tools such as Compuware’s DevPartner Studio can detect how parts of an application are locking different resources, said Ken Cowan, a product line manager for the Detroit-based company.





Share this link: http://sdt.bz/29121
 
Most Read Latest News Blog Resources

Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
Coverity adds concurrency checking for C#
Prevent 4.3 also gained checkers for Win32 applications written in C and C++. Broader support for Microsoft products, particularly Windows and Visual Studio, has been implemented Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
02/09/2012 02:16 PM EST

Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
02/07/2012 11:57 AM EST

RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
02/04/2012 01:57 PM EST

GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

 
Events calendar tab
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

2/26/2012 to 2/29/2012
San Francisco
BZ Media

2/27/2012 to 3/2/2012
San Francisco
RSA

3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

3/5/2012 to 3/9/2012
San Francisco
TechWeb