LOGIN | REGISTER NOW | SUBSCRIBE
 

Coverity Takes Its SATs


Coverity has developed a new static code analysis engine

By David Worthington
Email    print   
September 19, 2007 —  In the 1970s there was Lint, a static source code analysis tool that flagged suspicious constructs in C code; false positives were common then, but modern tools can identify a broader range of constructs—with far fewer false positives.

Coverity added a completely new type of source code analysis engine to its Prevent SQS software quality system, in an update released on Sept. 19. Prevent SQS uses a technique called SAT (from Boolean Satisfiability). Unlike many tools, SAT is not based on data flow analysis.

Rather, it complements Coverity’s data flow analysis engine. SAT is concerned with whether a Boolean expression has a solution.

Coverity Prevent SQS maps code, identifies and resolves defects. It automatically builds a “Software DNA” map to understand the code and break down languages such as C. It then translates the map into relevant formulas for defect detection, applies bit-accurate reasoning and runs an assertion-based SAT-solver, chief technology officer Ben Chelf explained.

According to a Coverity white paper, a SAT-solver “takes in a formula of variables under the operations and determines if there is a mapping of each individual variable to true and false, such that the entire formula evaluates to true.” This method is meant to flag defects and reduce false positives.

SAT was first used commercially in the electronic design automation industry for semiconductor chip design, Chelf explained. He added, “The hardware guys are way ahead of software.”

The discovered defects fit into the same workflows as those discovered by customers or QA teams, Chelf said. The classes of defects Prevent SQS detects are buffer overflows, dead code, integer overflows and string overflows.

Additional SAT solvers are slated for the next release of Coverity Prevent SQS.





Share this link: http://sdt.bz/31147
 
Most Read Latest News Blog Resources
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
Appcelerator Acquires Cocoafish to Add Instant Mobile Cloud Capabilities to its Industry Leading Titanium Platform
Appcelerator Offers Messaging, Social, Location and Storage Mobile Cloud Services to All Mobile App Publishers
Zeichick’s Take: Radio moves from analog waveforms to digital packets
Streaming radio highlights the need for streaming applications to be designed to take up as little bandwidth as possible
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter


Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
News Briefs: October 15, 2008
Electric Cloud makes its product line compatible with Microsoft's HPC Server, RapidMind released add-ons for its RapidMind platform, and Fujitsu opens a subsidiary in North America Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
02/09/2012 02:16 PM EST

Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
02/07/2012 11:57 AM EST

RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
02/04/2012 01:57 PM EST

GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

 
Events calendar tab
Cloud Connect
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

SPTechCon: The SharePoint Technology Conf.
2/26/2012 to 2/29/2012
San Francisco
BZ Media

RSA Conf.
2/27/2012 to 3/2/2012
San Francisco
RSA

IBM Pulse Conf.
3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

Game Developer Conf.
3/5/2012 to 3/9/2012
San Francisco
TechWeb