Questions tagged [static-analysis]

Tools that analyze source code to determine properties (size, speed, complexity measures) or problems (style issues, coding errors, API misuse, ...)

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

A static analyzer that can prove that some source code will never run under given circumstances

I am looking for a program or script or software library that can take some software sources: // Module: ./myUtils function hello(): void { console.log("Hello!"); } // Module: ./userInput ...
damix911's user avatar
  • 101
1 vote
0 answers
17 views

Are there any tools that can be used to compute condition branch complexity?

I have tried lizard and codalyze, but both can't perfectly meet my needs. For example bool foo(int n) { if (n > 10) { if (n % 2 == 0) { return true; } else { ...
sophistcxf's user avatar
1 vote
0 answers
19 views

is there a open source backward static slicing tool in Java that is actually maintained and easy to use?

A backward slice identifies those statements that affect the value of the attribute. For example: x = 1; y = 2; z = y-2; r = x; z = x+y; /* the slice point is the end of the program */. Here, ...
Exploring's user avatar
  • 111
4 votes
0 answers
160 views

Tool that detects violation of backwards-compatibility in Python code

I'm looking for a tool that compares Python code to a reference version of that code (e.g. the repository's main branch) and determines if the changes necessarily lead to backwards-incompatibility ...
smheidrich's user avatar
2 votes
2 answers
1k views

Static Application Security Testing (SAST) Tool for JavaScript

I'm looking for software that I can integrate into a CI pipeline of a javascript project. The tool should check the code for security issues. For Python code, I'm happy with bandit. For JavaScript, I ...
Martin Thoma's user avatar
  • 2,559
1 vote
1 answer
500 views

What free static analysis tools are available for Rust?

My need is to understand an existing Rust codebase. I have the ability to see the module/trait/function hierarchy using rustdoc, and to quickly jump to refs and defs using VS Codium (privacy ...
happybeing's user avatar
1 vote
2 answers
33 views

Static Analysis tools at method/function level?

Recently I got into using static analysis tools like sonarqube and Teamscale. However, they only show metrics at Project/Package/Class level. I am particularly interested in assessing the quality of ...
heckDev's user avatar
  • 11
1 vote
0 answers
16 views

Tools for print type of variables in C program

I am looking for a tool that can output the type of variables in C program in text format. Could you please suggest tools that can perform this task?
Thuy Nguyen's user avatar
2 votes
1 answer
189 views

A tool to create diagrams of control flow of Python programs

I was wondering whether anybody had come across a tool that can have a stab at depicting the control flow of a Python application - for instance, identifying the entry point(s) to a project, and ...
Mike Sadler's user avatar
2 votes
0 answers
25 views

(Java) Libraries to generate C/C++/C# Call Dependency Graphs

I'm looking for any libraries that could help me extract code symbols (functions, types etc.) from the C family languages, preferably including calling dependencies. A Java library would be best since ...
Double M's user avatar
0 votes
0 answers
25 views

Static Code Analyzer for taint analysis

For an evaluation I need to check the correctness of "dataflow constraints" which describe the relationships between the parameters and return values passed to api function calls. I have the ...
Nordwald's user avatar
  • 101
3 votes
1 answer
311 views

Abstract Syntax Tree and Control Flow Graph Generator Tool for C++ source code

Can you suggest some tool that generates both Abstract Syntax Tree and Control Flow Graph from C++ source code?
Farhan Hasin's user avatar
1 vote
0 answers
41 views

Static analysis for Python functional programming best practices?

Is there a free Python cross-platform (Ubuntu Linux, Mac OS X, Windows 10) tool to check if Python production code complies with best practices of Python functional programming specific idioms, etc.? ...
thinwybk's user avatar
  • 347
1 vote
0 answers
27 views

Tool to list memory-mapped I/O in C source code

I try to find a light-weight tool to detect some line of C code then get information. For example, I want to detect the code which performs Memory-mapped I/O in embedded software. This code often ...
Thuy Nguyen's user avatar
1 vote
1 answer
92 views

C/C++ Static Analysis - Tool to show header used in statement or line

I'm searching for a tool to get the used header (if there is one/more) for every line/statment in my c++ code. Example: #include<iostream> std::cout << "hallo"; The output i'd like to ...
lleo's user avatar
  • 11
10 votes
1 answer
2k views

The best Code Contracts alternative for VS 2017/2019 and .net core projects?

I was using Code Contracts in several projects and I was really satisfied with its static checker and propagated it across other developers. With new Visual Studio 2017 and .NET Core projects, I found ...
Rudolf Dvoracek's user avatar
1 vote
1 answer
65 views

Static C++ Api coverage tool

Given a set of public headers, and various test code that makes use of these headers, I need to generate a list of used/unused API calls. I am working with a platform that can not easily have ...
user2180076's user avatar
2 votes
1 answer
144 views

Are there static language compilers that can target optimized Lua 5.1/5.2 code?

I want to compile a code written in a programming language with static semantics targetting an unique Lua equivalent optimized code (of preference, compatible with Lua 5.1/5.2). So I need a compiler ...
user avatar
1 vote
2 answers
169 views

A static analysis tool for C/C++

I have a list of fields extracted from a C/C++ code base. I have to analyze the source files to check which fields are modified or used by which functions. The tool I used for fields extraction is ...
Taha Rehman Siddiqui's user avatar
1 vote
1 answer
76 views

Choosing an open source Continuous Delivery solution for programming education

In my Business Informatics Bachelor thesis I have chosen a topic, in which I have to set up a Continuous Delivery (that must be open source) server which students can use in their programming ...
Bruder Lustig's user avatar
0 votes
1 answer
142 views

Software to perform static analysis on PHP 5.3 code and help migrate to PHP 5.6/PHP 7

I've a old codebase written in PHP 5.3, which I'm planning to migrate to PHP 5.6 (at least) or if possible, PHP 7. Are there tools that can do static analysis of the code and give me a list of things ...
user1336's user avatar
  • 101
3 votes
1 answer
291 views

GRATIS MISRA checker for C

Is there any gratis tool which checks C code for MISRA compliance? Standalone static code analysis if acceptable, any platform. A bonus would be an IDE, plugin (preferably Eclipse, but any gratis ...
Mawg's user avatar
  • 9,033
2 votes
1 answer
65 views

Static code tester / analyser for Angularjs

Is there any static code tester available for Angular.js? For Ruby, I have Rubocop. Similar to this, is there any command line tool available to test the best practices for angularjs coding?
Sayuj's user avatar
  • 129
6 votes
0 answers
51 views

Tool to identify the sources of compile-time memory consumption

TLDR; What kind of tools are available in a Unix environment to help me identify where time and memory are being spent at compile-time? I have a small C++ hobby project which contains no template ...
quant's user avatar
  • 169