Enabling High - Quality C/c++ Software, Automatically-coverity Prevent

Author: tracy

| Posted: 12-03-2008 | Comments: 0 | Views: 82 | Rating: (61)

(?)

What Is It?

Coverity Prevent SQS™ is the market-leading automated approach to identify and resolve the most critical defects in C, C++, and Java source code. By providing a complete understanding of your build environment, source code, and development process, Prevent SQS sets the standard in enabling high-quality software across organizations worldwide.

Prevent SQS for C/C++ automatically analyzes large, complex C and C++ code bases and detects critical, must-fix defects that could lead to system crashes, memory corruption, security vulnerabilities, unpredictable behavior, and performance degradation.

Prevent SQS features:

• 100% path coverage: Prevent SQS for C/C++ analyzes 100% of the paths through your source code, ensuring that all possible execution branches are followed, while avoiding impossible paths to maintain fast execution.

• Low false positive rate: Prevent SQS for C/C++ maintains a very low false positive rate , ensuring that developers’ time spent inspecting defects will result in noticeable quality improvements.

• Highly scalable: Prevent SQS for C/C++ analyzes millions of lines of code in a matter of hours, easily integrating into your regular build process with little or no additional hardware and no disruption to your development process.

What Makes It Great?

Unlike other C/C++ analysis tools that focus on programming style and syntax-based checks, Prevent SQS for C/C++ performs deep, interprocedural analysis to uncover the critical, must-fix defects that matter most to developers. Prevent SQS for C/C++ leverages multiple analysis engines to uncover hard-to-find defects including:

• Path Flow Engine understands the control flow through each function in your code base, allowing Prevent SQS to analyze 100% of the paths through your code.

• Statistical Engine tracks behavioral patterns throughout your entire code base, allowing Prevent SQS to infer correct behavior based on previously observed behavior.

• Interprocedural Summary Engine enables Prevent SQS to perform a whole program analysis of complex call chains at any depth across files and modules in a form that is most similar to the eventual executing Binary. This result in the highest-fidelity results available.

• False Path Engine solves each branch condition to determine if it will be true, false, or unknown on the current path. This allows Prevent SQS to efficiently remove obvious false positives from the set of defects reported.

A sample of the critical defects reported by Prevent SQS for C/C++ include:

Concurrency Issues

• Double locks, missing locks.

• Locks acquired in incorrect order.

• Locks held by blocking functions.

Memory Corruption and
Mismanagement

• Resource leaks.

• Calls to freeing functions using invalid arguments.

• Excessive stack use in memory constrained systems.

Crash-causing pointer errors

• Dereference of null pointers.

• Failure to check for null return values.

• Misuse of data contained within wrapper data types.

C++ Specific Errors

• Misuse of STL iterators.

• Failure to de-allocate memory by destructors.

• Incorrect override of virtual functions.

• Uncaught exceptions.

Window/COM Specific Errors

• Incorrect memory allocation with COM interfaces.

• Incorrect type conversions.

Security Vulnerabilities

• Buffer overruns.

• SQL injection.

• Cross-site scripting.

• Integer overflows.

About Coverity

Coverity (www.coverity.com) is the market leader in improving software quality and security. Coverity’s groundbreaking technology automates the approach to identifying and resolving critical defects and security vulnerabilities in C/C++ and Java source code. More than 300 leading companies have chosen Coverity Prevent SQS because it scales to tens of millions of lines of code, has the lowest false positive rate in the industry and provides total path coverage. Companies like Ericsson, HP, Samsung, EMC, and Symantec work with Coverity to eliminate security and quality defects from their mission-critical systems.
Coverity also has customers like Symbian, RIM (Blackberry), Juniper networks, Cisco, Texas instruments and is also used by the Department of Homeland security to scan lots of open source projects.

Free trial

Coverity offers a free trial of Prevent SQS that will detect a wide range of crash-causing defects in your code base within hours. No changes to your code are necessary, there are no limitations on code size, and you will receive a complimentary report detailing actionable analysis results. Register for the on-site evaluation at: http://www.coverity.com .

Rate this Article:

Current: 0 / 5 stars - 0 vote(s).

Article Tags: Java, Software Testing, C++, Source Code Analysis, Coverity, Debugging, Pointer Errors, Race Condition, Dead Lock

Article Source: http://www.articlesbase.com/programming-articles/enabling-high-quality-cc-software-automaticallycoverity-prevent-357654.html

Print article

Send to friend

Publish this Article

Author feedback

About the Author:

Coverity (www.coverity.com) is the market leader in improving software quality and security. Coverity’s groundbreaking technology automates the approach to identifying and resolving critical defects and security vulnerabilities in C/C++ and Java source code. More than 300 leading companies have chosen Coverity Prevent SQS because it scales to tens of millions of lines of code, has the lowest false positive rate in the industry and provides total path coverage.

Submitting articles has become one of the most popular means to drive traffic to your website and promote yourself and your business. Join us today - It's Free!

Article Comments

Add new Comment

Coverity Introduces New Code Analysis Capabilities for Multi-threaded Applications
By: coverity | 24/04/2008 | Programming
Coverity, the leader in improving software quality and security automatically, has introduced a sophisticated new concurrency defect detection capabilities in Coverity Prevent™, the company’s flagship static code analysis solution for C/C++ and Java. This new technology introduces the first static defect detection of race conditions, one of the most difficult to find concurrency errors that occurs in multi-threaded applications.

Types of Computer Software
By: Dean Barnard | 19/09/2007 | Computers
Software is the language of a computer. And like human language, there are many different computer languages. Essentially, computer software can be divided into three main groups depending on their use and application.

Agile Software Development and What it Means
By: DOTNUTSHELL Technolgies | 04/02/2008 | Software
Agile software development is a conceptual framework for software engineering that promotes development iterations throughout the life-cycle of the project.

Algorithm Building Tools
By: Puneet Arora | 16/10/2008 | Programming
Is the Process of Building Logic for writing a Computing program easy or simply hard to figure out . What ability makes us do certain Computing /Programming programming easily and on some we are in fix ?

Long Run of Open Source Software in Business World
By: Sam Jose | 30/12/2006 | Small Business
Free and open source software has become the newest craze in business and IT world. The second question ‘is it good for my business’ now takes a secondary position. Both business owners and managers agree to the use of free and open source software.

Accessing Ms Access Using Java
By: Twinkle | 20/12/2007 | Programming
JDBC connection using JAVA code

Freelance Job
By: freelance job | 13/10/2008 | ECommerce
Work from home, running your own freelance job and take control of your own future. Sounds great, huh? And now you can make it happen. check it- http://102freelancejob.com

Offshore Software Testing
By: http://www.binarysemantics.com | 17/04/2008 | Software
Software Testing determines the efficiency and the functioning of a software. It can be regarded as a crucial phase in the Software Development Life Cycle. Testing pulls out all the drawbacks in the functioning of the software.

Got a Question? Ask.

Ask the community a question about this article:

Frequently Asked Questions

My friend bought a test management system just ...
By: nelson | 25-10-2008
My friend bought a test management system just recently after comparing a lot of products. But its performance was not quite up to the mark. Please suggest a good one that is worth the money.

I recently upgraded to AOL 10.1 but my saved e ...
By: brad | 24-10-2008
I recently upgraded to AOL 10.1 but my saved e-mails did not follow into the new version! Can I retrieve them? How? Your assistance greatly appreciated!

I passed had passed my US citizenship interview ...
By: ravneet | 23-10-2008
I passed had passed my US citizenship interview. Then the next day the officer called me and said that I needed to come to the office to show them my husband's certificate. I showed them and they denied my case because I applied too early. Now in 13 days it'll be about 4 years and 9 monthes. Can I reapply for that case now? How long will it take for the case to get proccessed ?

What is pc software
By: kmcgrew | 23-10-2008
what is pc software

E-mail problems
By: stiups36 | 23-10-2008
Loll i just posted a question about ot getign e-mail and this site says my answer will be sent to me through e-mail which wil nto be possible since I cannot get my mail!! Help ME!!!

I need a test management tool and one of my ...
By: Serene | 22-10-2008
I need a test management tool and one of my friends suggested Zephyr. But I would like to hear from those who have actually used Zephyr.

Q&A Powered by:

Latest Programming Articles

Cool Desktop Wallpapers
By: Danny | 18/11/2008
Cool desktop wallpaper is accomplishments arrangement that displayed in the computer operating system. The wallpapers usually be acclimated in JPEG, BMP and GIF book formats. That wallpaper can be acclimated with Microsoft Windows, Linux and Macintosh Mac OS. Each adviser can be altered requirements, alike admitting wallpaper images advised for accepted monitors can be scaled up or bottomward to the fit size. Those are accessible on the internet for free. Some categories of wallpapers are a

Tips for Buying Software Online
By: Daniel Jowssey | 17/11/2008
Buying software online not only helps save the planet, it also has other benefits, including: * Ease and Simplicity. You can purchase software in your underwear at 4am if you really want to. Shopping online doesn’t have to be done within regular business hours, nor do you need to look your best to do it. It’s also easy to shop around for the best prices and takes less time than driving to the shops.

Mvc Design Pattern
By: TuVinhSoft .,JSC | 14/11/2008
Model-view-controller (MVC) is an architectural pattern used in software engineering. In complex computer applications that present a large amount of data to the user, a developer often wishes to separate data (model) and user interface (View) concerns, so that changes to the user interface will not affect data handling, and that the data can be reorganized without changing the user interface.

Advantages of Low Cost Contract Programmers in Freelance Programming
By: Joanna Gadel | 12/11/2008
It observed that web industry is getting tougher thus the necessity of freelance contract programmer is required for developing more effective website with flexible features. This article states the fruitful advantages of freelance programmers in contract programming.

A Guide to Cnc Kits
By: Martin Applebaum | 09/11/2008
CNC kits are a way in which to construct your CNC machine. This article will provide some information on these machines.

A Guide to Cnc Tube Bending Machines
By: Martin Applebaum | 08/11/2008
Are you familiar with a CNC tube bending machine? This article will shed some light on the main function and components of this machine.

Ways to Hire Dedicated Php Programmers
By: Jucick | 08/11/2008
It’s not at all easy to hire dedicated PHP programmers unless you know where and how to find them. Whether you need to fix, update or enhance your website you naturally want the job done quick and right.

Top 4 Reasons Why Addressing Web Accessibility is Important
By: Matt Cave | 05/11/2008
There are very high chances that web accessibility is more important to the performance of your web site than you realize. Article takes a look at the top 4 reasons why it would be important to address the issue of web accessibility.

Article Categories

Need Help?

Sign up for our email newsletter

Receive updates, enter your email below

Use of this web site constitutes acceptance of the Terms Of Use and Privacy Policy | User published content is licensed under a Creative Commons License.
Copyright © 2005-2008 Free Articles by ArticlesBase.com, All rights reserved. (0.16, 17)

Enabling High - Quality C/c++ Software, Automatically-coverity Prevent

Article Comments

Related Articles

Got a Question? Ask.

Latest Programming Articles

Need Help?

Site Links

Webmasters

Business Info

Sign up for our email newsletter