A Comparative Study of Industrial Static Analysis Tools

Electronic Notes in Theoretical Computer Science

Volumn 217, Issue C, 2008, Pages 5-21

  Emanuelsson, Pär ^a   Nilsson, Ulf ^b  

^a ERICSSON RESEARCH   (Sweden)

^b LINKÖPING UNIVERSITY   (Sweden)

Author keywords

dataflow analysis; defects; security vulnerabilities; Static analysis

Indexed keywords

CODES (SYMBOLS); DEFECTS; INDUSTRIAL APPLICATIONS; INFORMATION MANAGEMENT; PATTERN MATCHING; SURVEYS;

ALIASING; ANALYSIS TOOLS; COMPARATIVE STUDIES; ERICSSON (CO); LARGE PROGRAMS; LINES OF CODE (LOC); MEMORY-MANAGEMENT; REAL DEFECTS; SECURITY VULNERABILITIES; SUPPORTING TECHNOLOGY; TECHNOLOGY ADVANCES; TELECOM COMPANY;

STATIC ANALYSIS;

EID: 47049111576     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2008.06.039     Document Type: Article

References (30)

1. Ball T., and Rajamani S. The SLAM Project: Debugging System Software via Static Analysis. AC SIGPLAN Notices 37 (2002) 1-3
2. Ben-Amram A.M., and Lee C.S. Program Termination Analysis In Polynomial Time. ACM Trans. Program. Lang. Syst. 29 (2007)
3. Bush W., Pincus J., and Sielaff D. A Static Analyzer For Finding Dynamic Programming Errors. Software, Practice and Experience 30 (2000) 775-802
4. Chelf, B., D. Engler and S. Hallem, How to Write System-specific, Static Checkers in Metal, in: PASTE '02: Proc. 2002 ACM SIGPLAN-SIGSOFT workshop on Program Analysis for Software Tools and Engineering (2002), pp. 51-60
5. Clarke E., Grumberg O., and Peled D. Model Checking (1999), MIT Press, Cambridge, MA, USA
6. Cousot, P. and R. Cousot, Abstract Interpretation: A Unified Lattice Model For Static Analysis of Programs by Construction Or Approximation of Fixpoints, in: Conf. Record of the Fourth Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages (1977), pp. 238-252
7. Cousot P., Cousot R., Feret J., Mauborgne L., Miné A., Monniaux D., and Rival X. The ASTRÉE Analyser. In: Sagiv M. (Ed). Proceedings of the European Symposium on Programming. (ESOP'05). Lecture Notes in Computer Science 3444 (2005) 21-30
8. Cousot, P. and N. Halbwachs, Automatic Discovery of Linear Restraints Among Variables of a Program, in: Conf. Record of the Fifth Annual ACM SIGPLAN-SIGACT Symp. on Principles of Programming Languages (1978), pp. 84-97
9. TM User's Manual (2.4)," (2006)
10. TM: Static Source Code Analysis for C and C++ (2006), product information
11. TM User's Manual 2.4," (2006)
12. Coverity Inc. The Scan Ladder. URL: (2007). http://scan.coverity.com
13. Dershowitz N., and Manna Z. Proving Termination With Multiset Orderings. Commun. ACM 22 (1979) 465-476
14. Deutsch, A., Interprocedural May-Alias Analysis for Pointers: Beyond k-limiting, in: Proc. PLDI (1994), pp. 230-241
15. Deutsch, A., Static Verification of Dynamic Properties, White paper, PolySpace Technologies Inc (2003)
16. Emanuelsson, P. and U. Nilsson, A Comparative Study of Industrial Static Analysis Tools (Extended Version), Technical Reports in Computer and Information Science no 2008:3, Linköping University Electronic Press (2008), URL: http://www.ep.liu.se/ea/trcis/2008/003/
17. Gimpel Software. PC-lint/FlexeLint. URL: (1999). http://www.gimpel.com/lintinfo.htm
18. GrammaTech Inc., Overview of GrammaTech Static Analysis Technology (2007), white paper
19. King J. Symbolic Execution and Program Testing. Comm. ACM 19 (1976) 385-394
20. Klocwork Inc., Detected Defects and Supported Metrics (2005), K7 product documentation
21. Palsberg, J. and M. Schwartzbach, Object-Oriented Type Inference, in: Conf Proc Object-Oriented Programming Systems, Languages, And Applications (OOPSLA '91) (1991), pp. 146-161
22. Parasoft Inc., Automating C/C++ Runtime Error Detection With Parasoft Insure++ (2006), white paper
23. PolySpace Technologies, "PolySpace for C Documentation," (2004)
24. Rational Software, Purify: Fast Detection of Memory Leaks and Access Errors, White paper (1999)
25. Rosenblum D.S. A Practical Approach to Programming With Assertions. IEEE Trans. Softw. Eng. 21 (1995) 19-31
26. Ryder, B. and F. Tip, Change Impact Analysis For Object-Oriented Programs, in: Proc. of 2001 ACM SIGPLAN-SIGSOFT workshop on Program Analysis For Software Tools And Engineering (PASTE '01) (2001), pp. 46-53
27. Schwartzbach, M., Lecture Notes on Static Analysis (2006), BICS, Univ. Aarhus, URL: http://www.brics.dk/~mis/static.pdf
28. Steensgaard, B., Points-to Analysis in Almost Linear Time, in: ACM POPL, 1996, pp. 32-41
29. Wagner, D. and D. Dean, Intrusion Detection via Static Analysis, in: Proc. of 2001 IEEE Symp. on Security and Privacy (SP'01) (2001), pp. 156-168
30. Wagner, T., V. Maverick, S. Graham and M. Harrison, Accurate Static Estimators For Program Optimization, in: Proc. of ACM SIGPLAN 1994 Conf. on Programming Language Design And Implementation (PLDI '94) (1994), pp. 85-96