Click here to Skip to main content

Submit your article

Static code analysis

static-code-analysis

Great Reads

Does Service Virtualization’s "Shift Left" Burden Developers?

by cynthia_dunlop

Service virtualization undeniably benefits the development process, but it can be both a blessing & a curse for developers. Learn how to minimize the burden on development to achieve maximum acceleration of delivery cycles.

A Static Analysis Tool for C++

by Greg Utas

Automating Scott Meyers' recommendations, cleaning up #include directives, analyzing dependencies...

As-Is Software Architecture

by Zebedee Mason

Software for automatically constructing architecture diagrams and metrics from source code and .NET assemblies is presented. Examples for Visual C++, Python, the Linux kernel, Boost and .NET are discussed.

Latest Articles

A Static Analysis Tool for C++

by Greg Utas

Automating Scott Meyers' recommendations, cleaning up #include directives, analyzing dependencies...

As-Is Software Architecture

by Zebedee Mason

Software for automatically constructing architecture diagrams and metrics from source code and .NET assemblies is presented. Examples for Visual C++, Python, the Linux kernel, Boost and .NET are discussed.

Does Service Virtualization’s "Shift Left" Burden Developers?

by cynthia_dunlop

Service virtualization undeniably benefits the development process, but it can be both a blessing & a curse for developers. Learn how to minimize the burden on development to achieve maximum acceleration of delivery cycles.

All Articles

Static code analysis

Should I make everything static or non-static?

16 Feb 2015 by OriginalGriff

As little as possible should be static - excepting extension methods, which have to be, and some methods which are "generic" to an application rather than specific to a class.C# is an OOPs language - and the first "O" is for "Object"! If you make everything static, then you are ignoring what...

static-code-analysis

Does Service Virtualization’s "Shift Left" Burden Developers?

21 May 2013 by cynthia_dunlop

Service virtualization undeniably benefits the development process, but it can be both a blessing & a curse for developers. Learn how to minimize the burden on development to achieve maximum acceleration of delivery cycles.

How to write a custom rule in FXCOP for "No. of characters in a line should be less than 90"

13 Oct 2015 by Matt T Heffron

For source code style checking you should check out StyleCop[^] and StyleCop+[^]

static-code-analysis

Can static code analysis be compared with anti-malware software?

16 Jan 2022 by OriginalGriff

They do totally different things: anti-malware looks for signatures (sometimes using pattern analysis rather than fixed strings) of malicious activity. Static code analysis is to do with checking that source code meets defined rules and...

static-code-analysis

Can static code analysis be compared with anti-malware software?

16 Jan 2022 by RickZeeland

There are analyzers for code security too, see: code-security-analyzers[^] But the term "Static Analyzer" usually refers to code analysis tools for measuring code quality like these: best-open-source-c-static-analysis-tools[^]

static-code-analysis

Has anybody executed Borg Dissassembler without the GUI?

15 Jun 2012 by lilyNaz

I need to dissassmble some files and I have used BORG, However I need to use this tool in command prompt and I don't want BORG to be interactive. Has anybody used BORG in this way and it would be appreciated if you could provide the source?I'm a in a bit of a crisis.Thank you.

static-code-analysis

Has anybody executed Borg Dissassembler without the GUI?

15 Jun 2012 by Richard MacCutchan

You can search[^] for the source code, and modify it to your will.

static-code-analysis

FxCop Custom Rule Implementation

5 Jun 2013 by Sergey Alexandrovich Kryukov

As to the first question, I can answer only partially, and I'm afraid that would be not the most essential part — how to create custom rules. Please see this CodeProject article:7 Steps to Write Your Own Custom Rule using FXCOP[^].Unfortunately, your first rule itself could be very...

static-code-analysis

Error on execution of a method (.NET / COM)

27 Jun 2013 by Jeneesh K. Velayudhan

I have one Initialize() in my class and I am calling a delegate wrapper method from this function as follows (the call back method will call around 20 times in a sec),public Initialize(){ CX_OUTPUT_CALLBACK cb = new CX_OUTPUT_CALLBACK(OutDelegateCb); ...

static-code-analysis

Should I make everything static or non-static?

16 Feb 2015 by User 11197367

Hi guys.I'm a beginner, and as far as I know the Code Entry Point has to be static. But you can only reference static variables and static methods within theese static Main class.I didnt made big multithreading yet, so I basically made absolutely everything static. Now I'm starting with...

static-code-analysis

How to use AIC, & BIC for selection of HMM model in speech recognition using MATLAB

27 Apr 2015 by myriame

How using AIC and BIC for selection hmm model,how calculate number of parameters help me please.

static-code-analysis

machine-learning

Find out all the methods in java class and the methods which are being called inside other methods in a java program

9 May 2016 by Sergey Alexandrovich Kryukov

Reading Java text files would be a bad idea, because you would need to implement most of the parts of a fully-fledged Java compiler, starting from reading the files, scanning, will all the lexical analysis and most other things.It would be much better to use compiled code and perform static...

static-code-analysis

Default analysis ruleset for C++ static analysis.

1 Oct 2018 by Maximilien

What is the default analysis ruleset for the C++ Static Analysis ? I can enable is with the /analyze flag. MSDN just says "Turns on analysis in the default mode." BTW, I know I can enable the analysis in the Code Analysis project property and that works. What I have tried: I tried tweaking...

static-code-analysis

How do I exclude C# files from fortify scan command file

31 Mar 2022 by Dave Kreskowiak

That's because Fortify is a 3rd party product, not Microsoft's. MSBuild is the project build system used by Visual Studio. No, it's doesn't have an "-exclude" switch. You're going to have to read the documentation on Fortify to figure out how to...

static-code-analysis

A Static Analysis Tool for C++

14 Jul 2022 by Greg Utas

Automating Scott Meyers' recommendations, cleaning up #include directives, analyzing dependencies...

static-code-analysis

As-Is Software Architecture

7 Jul 2016 by Zebedee Mason

Software for automatically constructing architecture diagrams and metrics from source code and .NET assemblies is presented. Examples for Visual C++, Python, the Linux kernel, Boost and .NET are discussed.

How to write a custom rule in FXCOP for "No. of characters in a line should be less than 90"

13 Oct 2015 by Patrice T

FxCop analyses binaries and not source code, so a rules about line length is non sense.Unless compilation usage have greatly changed lately, comments are only in source code and never in binaries (even if technically possible to do otherwise), so same answer than for line length.

static-code-analysis

Error on execution of a method (.NET / COM)

27 Jun 2013 by Ron Beyer

public Initialize(){ CX_OUTPUT_CALLBACK cb = new CX_OUTPUT_CALLBACK(OutDelegateCb); AureusSDK_Wrapper_VideoCallbackFunSetup.CX_SetOuputCallBack(cb, cnt); GC.KeepAlive(cb);} public static void OutDelegateCb(IntPtr p_aureus_video_output,...

static-code-analysis

FxCop Custom Rule Implementation

5 Jun 2013 by Venkatachalam Balakrishnan

Hi Friends,I want to check DB Layer or Business Layer is not directly invoked from Controller using FxCop.I want to check whether all the method has try/catch using FxCop.Please help me.

static-code-analysis

Error on execution of a method (.NET / COM)

28 Jun 2013 by Jeneesh K. Velayudhan

Thank you, Ron Beyer...It worked...:)

static-code-analysis

How to write a custom rule in FXCOP for "No. of characters in a line should be less than 90"

13 Oct 2015 by balu12345

Hi All, Please help in implementing below custom rules in FXCOP, 1."No. of characters in a line of code should be less than 90"? 2. Remove commented codeRegardsBalu

static-code-analysis

Find out all the methods in java class and the methods which are being called inside other methods in a java program

9 May 2016 by Member 12512597

1) I have to read a txt file in java. Find out the methods in the class and also find out what are all the methods called by a single method.For eg -> Sport is my main method. That method might call external methods like cricket football and tennis.Country is a method. It calls India,...

static-code-analysis

Can static code analysis be compared with anti-malware software?

16 Jan 2022 by Atalanttore

Is static code analysis comparable to anti-malware software, as both only find already known vulnerabilities or malware and the rest is supposed to be found by some voodoo heuristics? What I have tried: I have only thought about it so far.

static-code-analysis