[go: nahoru, domu]

Coverity: Difference between revisions

Content deleted Content added
No edit summary
Line 15:
 
== Products ==
'''Coverity Static Analysis''' is a [[static code analysis]] tool for [[C (programming language)|C]], [[C++]], [[C Sharp (programming language)|C#]] and [[Java (programming language)|Java]] [[source code]]. Coverity commercialized a research tool for finding bugs through static analysis,<ref>[http://cacm.acm.org/magazines/2010/2/69354-a-few-billion-lines-of-code-later/fulltext "A Few Billion Lines of Code Later: Using Static Analysis to Find Bugs in the Real World; How Coverity built a bug-finding tool, and a business, around the unlimited supply of bugs in software systems"]</ref> the Stanford Checker, which used [[abstract interpretation]] to identify [[software bug|defects]] in source code.<ref>[http://www.stanford.edu/~engler/ Dawson Engler] at [[Stanford University]]</ref>
 
The most notable use of the tool was under a [[United States Department of Homeland Security]] contract, in which it was used to examine over 150 [[open source]] applications for bugs.<ref>[http://scan.coverity.com/all-projects.html The open source results] on scan.coverity.com</ref> On March 6, 2007 it was announced that over 6000 bugs across 53 projects found by the scan had been fixed.<ref>[http://scan.coverity.com/one-year.html Open source one year results] on scan.coverity.com</ref><ref>[http://www.zdnetasia.com/news/security/0,39044215,39315781,00.htm "LAMP lights the way in open-source security"] – [[ZDNet]]</ref>