|
1167
|
1 |
.. -*- coding: utf-8; -*-
|
|
|
2 |
|
|
|
3 |
================
|
|
|
4 |
Code analysis.
|
|
|
5 |
================
|
|
|
6 |
.. contemts::
|
|
|
7 |
|
|
|
8 |
About.
|
|
|
9 |
======
|
|
|
10 |
|
|
|
11 |
* http://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
|
|
|
12 |
|
|
1170
|
13 |
Splint.
|
|
|
14 |
=======
|
|
|
15 |
|
|
|
16 |
Secure Programming Lint, is a programming tool for statically checking C
|
|
|
17 |
programs for security vulnerabilities and coding mistakes. Formerly called
|
|
|
18 |
LCLint, it is a modern version of the Unix lint tool.
|
|
|
19 |
|
|
|
20 |
http://en.wikipedia.org/wiki/Splint_%28programming_tool%29
|
|
|
21 |
|
|
|
22 |
Sparse.
|
|
|
23 |
=======
|
|
|
24 |
|
|
|
25 |
Sparse is a tool designed to find possible coding faults in the Linux kernel.
|
|
|
26 |
|
|
|
27 |
http://en.wikipedia.org/wiki/Sparse
|
|
|
28 |
Wikipedia page.
|
|
|
29 |
|
|
1167
|
30 |
PMD.
|
|
|
31 |
====
|
|
|
32 |
|
|
|
33 |
PMD is a static ruleset based Java source code analyzer that identifies
|
|
|
34 |
potential problems.
|
|
|
35 |
|
|
|
36 |
PMD has plugins for JDeveloper, Eclipse, JEdit, JBuilder, Omnicore's CodeGuide,
|
|
|
37 |
NetBeans/Sun Studio, IntelliJ IDEA, TextPad, Maven, Ant, Gel, JCreator, Hudson,
|
|
|
38 |
Jenkins, Sonar and Emacs.
|
|
|
39 |
|
|
|
40 |
http://pmd.sf.net/
|
|
|
41 |
Home page.
|
|
|
42 |
http://en.wikipedia.org/wiki/PMD_%28software%29
|
|
1168
|
43 |
Wikipedia page.
|
|
|
44 |
|
|
|
45 |
Yasca.
|
|
|
46 |
======
|
|
|
47 |
|
|
|
48 |
Yasca leverages external open source programs, such as FindBugs, PMD, JLint,
|
|
|
49 |
JavaScript Lint, PHPLint, Cppcheck, ClamAV, Pixy, and RATS to scan specific file
|
|
|
50 |
types, and also contains many custom scanners developed for Yasca.
|
|
|
51 |
|
|
|
52 |
http://yasca.org/
|
|
|
53 |
Home page.
|
|
|
54 |
http://yasca.org/
|
|
|
55 |
Development home page.
|
|
|
56 |
http://en.wikipedia.org/wiki/Yasca
|
|
|
57 |
Wikipedia page.
|
|
|
58 |
|
|
1169
|
59 |
Sonar.
|
|
|
60 |
======
|
|
|
61 |
|
|
|
62 |
Sonar uses various static code analysis tools such as Checkstyle, PMD, FindBugs,
|
|
|
63 |
Clover to extract software metrics.
|
|
|
64 |
|
|
|
65 |
http://en.wikipedia.org/wiki/Sonar_%28software_quality%29
|
|
|
66 |
Wikipedia page. |