Questions tagged [static-code-analysis]

Static code analysis is the analysis of computer software that is performed without actually executing it.

According to Wikipedia, Static code analysis is the analysis of computer software that is performed without actually executing programs (analysis performed on executing programs is known as ). In most cases the analysis is performed on some version of the source code, and in the other cases, some form of the object (byte) code. The term is usually applied to the analysis performed by an automated tool, with human analysis being called program understanding, program comprehension or .

510 questions
0
votes
1 answer

Is there a way in Androguard to determine whether a method is actually callable?

I want to do a static analysis of an Android app with Androguard. Particularly, I am interested to identify whether a particular library method is called. However, as the method call could be in a part of the code that is never reached, would the…
0
votes
1 answer

Get the results of Code inspections

I installed Resharpers command line tool.Then I tried InspectCode SolutionFile.sln > errors.txt. The output in errors.txt is JetBrains Inspect Code 9.1 Running in 64-bit mode, .NET runtime 4.0.30319.34014 under Microsoft Windows NT…
Nevin Raj Victor
  • 2,924
  • 3
  • 23
  • 37
0
votes
1 answer

Get jshint errors in a text file

I am using jshint for my code analysis. I run jshint PATH_TO_.js . Is there a way to print these errors into a text file.
Nevin Raj Victor
  • 2,924
  • 3
  • 23
  • 37
0
votes
1 answer

Visual studio extension that uploads code analysis warnings to a server

This is what i want to achieve: When a developer runs code analysis on his solution folder or on a project i want all the errors and warnings generated by code analysis to be transferred to a remote server. To to this i want to write an extension to…
0
votes
1 answer

python source code parser

for the sake of analysing a python project, I need a tool that given the code and a line number will provide me with the signature of the method the line represents: module_name.[class.]method_name. Due to python indentation parsing it should be…
akiva
  • 2,677
  • 3
  • 31
  • 40
0
votes
0 answers

When using the Code Analysis tools in Visual Studio 2013, is it possible to create my own rules?

When using the Code Analysis tools in Visual Studio 2013 (C#), is it possible to create my own rules? I think I can use something like this to help enforce coding conventions. I found MSDN this article that goes over the process, but the article is…
user2023861
  • 8,030
  • 9
  • 57
  • 86
0
votes
3 answers

How to set the output path for native code analysis logs, when running MSBUILD on command line

I build my solution using MSBUILD on command line like this: msbuild %SOLUTION% /m /fl /flp:LogFile="%OUTPUTFILE%" /p:Configuration=%BUILDCONFIG% /p:RunCodeAnalysis=True Having /p:RunCodeAnalysis=True creats code analysis results for both native…
0
votes
2 answers

Intellij/ Java - identify calls to annotated methods

I need to be able to identify calls to methods with specific annotations in Intellij Idea 13, during compile time or by using static code analysis, like calls to @Deprecated methods are identified. I have looked into doing a structural search in…
PeterK
  • 1,697
  • 10
  • 20
0
votes
1 answer

Mono gendarme equivalent for java

I'm looking for a source analytics tool that does an equivalent job to Mono Gendarme but for Java. Due to my current unfamiliarly with the Java universe I am not sure what the correct google search terminology would be and rather than go down the…
MarcF
  • 3,169
  • 2
  • 30
  • 57
0
votes
1 answer

what is wrong with object disposal here

I have some code like this. using (StreamWriter sw = new StreamWriter(@"c:\SomeFile.txt")) { using (IDataReader reader = SomeMethodThatReturnsADataReader()) { while (reader.Read()) { // using sw and reader here …
crazy novice
  • 1,757
  • 3
  • 14
  • 36
0
votes
2 answers

Is there any reliable Static Code Analysis Tool available for ColdFusion?

From last few day , I was searching for static code analysis tool for ColdFusion. I have not got a good one till now. I found two. YASCA https://code.google.com/p/cf-metrics/ From YASCA I was getting only XSS alerts and some alerts for session…
user3427540
  • 1,162
  • 1
  • 14
  • 30
0
votes
1 answer

How to highlight one line contains a specific PsiElement programmably in Intellij IDEA?

I know how to highlight a PsiElement, But how to do it for one line? I want highlight java source code in my plugin like the test coverage do.
yanyu
  • 219
  • 2
  • 11
0
votes
2 answers

Finding unused methods in .net environment

Is it possible to find all the unused method in a solution? I.e. Private method not called inside the class or method which are called from methods which are not called
Revious
  • 7,816
  • 31
  • 98
  • 147
0
votes
3 answers

Xcode - 5.0.2, iOS Check dependencies No architectures to compile for (ARCHS=i386, VALID_ARCHS=armv7 armv7s)[iOS Static Code Analysis - Jenkins]

I am trying to build my static code analysis configuration for iOS through Jenkins. I am Using Architecture - $(ARCHS_STANDARD_32_BIT) and valid architecture - arm64 armv7 armv7s. While trying to build the configuration I am receiving the error…
SrAn
  • 110
  • 1
  • 10
0
votes
1 answer

How to convert data type from Cil_types to Cil

When I use fram-c to write parser. I encountered a problem that Ast.get() returns the type Cil_types.file but I need Cil.file for future use. They are actually has the same fields, but the ocaml compiler just not let the direct assignment from…
FakeJohn
  • 3
  • 2