Semmle launches bug scanner for Eclipse
March 1, 2009 —
False positives are the bane of all code scanners. But Semmle, a small company and tool that has emerged from research at Oxford University, is betting that a simple query language can take the sting out of code scanners. The company today has released SemmleCode, an Eclipse plug-in that brings bug-scanning capabilities into the open-source IDE.
Oege de Moor, CEO of Semmle, said that SemmleCode can ferret out many coding issues within Eclipse. The tool was originally developed in Oxford University's computer science department, where de Moor is a professor. De Moor also belongs to a programming tools research team at the university, and he focuses on aspect-oriented programming and refactoring as well.
“The idea here is that you take the entire source of a software system and store it in a relational format," said de Moor. "Then you do analysis. The kinds of things you can compute are all the usual quality matrices. It finds typical bugs, unmarked dependencies and all these things."
De Moor said that SemmleCode is “similar to FindBugs … But with [FindBugs] you have to be an expert. Tweaking analysis is really difficult.” But de Moor said that SemmleCode includes a simpler object-oriented query language that can make tweaking and customizing code searches easier.
“If you get false positives, it's typically because of the characteristics of your own codebase,” said de Moor. “These queries are written in an object-oriented query language, .QL. It's a modern variant of a query language called Datalog. It makes it possible to phrase the queries in familiar terms.”
SemmleCode costs US$499 per user, and it is targeted at both Eclipse users and software consultants. Currently, SemmleCode can scan Java and XML files, but de Moor said that new languages, such as C++, will be added over time.
“These days, if you have a big Java project, it's using Spring, [and there are] lots of configuration files. If you want to talk about dependencies you have to check XML. But the technology is not tied to Java,” said de Moor.
Aside from adding more languages, de Moor said that SemmleCode should gain new report and graphical capabilities in future releases.
“We always get more requests for different ways of visualizing. You can look at the results as heat maps or as problems in the Eclipse problems view. But people always want more ways of visualizing it,” said de Moor.
Related Search Term(s): Eclipse, Semmle
Share this link: http://sdt.bz/33298
Most Read Latest News Blog Resources
Zeichick’s Take: Radio moves from analog waveforms to digital packets
Streaming radio highlights the need for streaming applications to be designed to take up as little bandwidth as possible
|
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Appcelerator Acquires Cocoafish to Add Instant Mobile Cloud Capabilities to its Industry Leading Titanium Platform
Appcelerator Offers Messaging, Social, Location and Storage Mobile Cloud Services to All Mobile App Publishers
|
|
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
|
|
Xceed releases UX-focused suite for Microsoft’s WPF
"Blendables" helps match user experiences to developer visions
|
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
|
|
Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
|
|
RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
|
|
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
|
The Hidden Costs of Software Licensing
Moving beyond paper-based software licensing to more flexible, software-based licensing is a business decision. There is a growing trend tow...
|
|
Case Study: You May Need a Development Mechanic
As a contractor for a major financial player in Germany, SOBEGE, a German-based consultancy specializing in embedded IT and web services, wa...
|
|
Ensuring Software Quality at a Major International Bank
One of the world’s leading international banks has adopted AgitarOne technology for delivering generated unit tests for their Java software...
|
|
Load Testing Adobe Flex Applications
Adobe Flex applications may be different from applications you’ve worked with before. For classic HTML web applications, the server does all...
|