LOGIN | REGISTER NOW | SUBSCRIBE
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 
Download Current Issue
ISSUE 3/15/2010 PDF

Need Back Issues?
DOWNLOAD HERE

Receive the print Edition?


 
blogs tab
ASP.NET MVC 2 Ships
ASP.NET MVC 2 has shipped.
03/12/2010 10:26 AM EST

Microsoft plans 'open' Silverlight analytics framework
Microsoft is going to announce a multipurpose analytics framework for Silverlight at MIX.
03/11/2010 09:51 AM EST

About CSS processing
Two sites that lead to a startling CSS conclusion.
03/10/2010 02:29 AM EST

 

Events calendar tab
SHARE
3/14/2010 to 3/18/2010
Seattle, Wa.
SHARE

Cloud Connect
3/15/2010 to 3/18/2010
Santa Clara, Calif.
TechWeb

Microsoft MIX10
3/15/2010 to 3/17/2010
Las Vegas
Microsoft

SharePointPro Summit & Expo
3/16/2010 to 3/19/2010
Las Vegas
Penton Media

TheServerSide Java Symposium
3/17/2010 to 3/19/2010
Las Vegas
TechTarget


 
print Printable version 
Most Read Latest News Blog Resources
Even with its success, .NET causes some consternation
Despite its popularity, the developer community believes that .NET isn't being fully serve...

Appcelerator dev environment targets Android, iPhone
This unified development environment compiles JavaScript into Objective-C or Java, and wil...

Eclipse creates new sub-projects for Mylyn
The sub-projects are designed to help organizations adopt agile ALM, and they will also br...

Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter

Coverity Takes Its SATs


Coverity has developed a new static code analysis engine

By David Worthington
September 19, 2007 — 
In the 1970s there was Lint, a static source code analysis tool that flagged suspicious constructs in C code; false positives were common then, but modern tools can identify a broader range of constructs—with far fewer false positives.

Coverity added a completely new type of source code analysis engine to its Prevent SQS software quality system, in an update released on Sept. 19. Prevent SQS uses a technique called SAT (from Boolean Satisfiability). Unlike many tools, SAT is not based on data flow analysis.

Rather, it complements Coverity’s data flow analysis engine. SAT is concerned with whether a Boolean expression has a solution.

Coverity Prevent SQS maps code, identifies and resolves defects. It automatically builds a “Software DNA” map to understand the code and break down languages such as C. It then translates the map into relevant formulas for defect detection, applies bit-accurate reasoning and runs an assertion-based SAT-solver, chief technology officer Ben Chelf explained.

According to a Coverity white paper, a SAT-solver “takes in a formula of variables under the operations and determines if there is a mapping of each individual variable to true and false, such that the entire formula evaluates to true.” This method is meant to flag defects and reduce false positives.

SAT was first used commercially in the electronic design automation industry for semiconductor chip design, Chelf explained. He added, “The hardware guys are way ahead of software.”

The discovered defects fit into the same workflows as those discovered by customers or QA teams, Chelf said. The classes of defects Prevent SQS detects are buffer overflows, dead code, integer overflows and string overflows.

Additional SAT solvers are slated for the next release of Coverity Prevent SQS.


Share this link: http://www.sdtimes.com/link/31147
 

Add comment


Name*
Email*  
Country     


  • Comment
  • Preview
Loading