PVS-Studio, Тула - Статический анализ кода для C, C++, C# и Java / Articles / Habr

ProfileArticles257Subscribers93KEmployees28

SvyatoslavMC Jul 25 2019 at 06:09

How to shoot yourself in the foot in C and C++. Haiku OS Cookbook

20 min

3.1K

PVS-Studio corporate blogC * C++ * Open source *

The story of how the PVS-Studio static analyzer and the Haiku OS code met goes back to the year 2015. It was an exciting experiment and useful experience for teams of both projects. Why the experiment? At that moment, we didn't have the analyzer for Linux and we wouldn't have it for another year and a half. Anyway, efforts of enthusiasts from our team have been rewarded: we got acquainted with Haiku developers and increased the code quality, widened our error base with rare bugs made by developers and refined the analyzer. Now you can check the Haiku code for errors easily and quickly.

+16

cerg2010cerg2010 Apr 12 2019 at 12:05

Checking rdesktop and xrdp with PVS-Studio

6 min

1.2K

PVS-Studio corporate blog*nix * C * C++ * Open source *

This is the second post in our series of articles about the results of checking open-source software working with the RDP protocol. Today we are going to take a look at the rdesktop client and xrdp server.

+16

Andrey2008 Feb 21 2019 at 07:08

False Positives in PVS-Studio: How Deep the Rabbit Hole Goes

6 min

858

PVS-Studio corporate blogC * C++ * Development for Windows *

Единорог PVS-Studio и GetNamedSecurityInfo

Our team provides quick and effective customer support. User requests are handled solely by programmers since our clients are programmers themselves and they often ask tricky questions. Today I'm going to tell you about a recent request concerning one false positive that even forced me to carry out a small investigation to solve the problem.

+16

n0mo Jul 22 2019 at 14:11

Getting Started with the PVS-Studio Static Analyzer for Visual C#

2 min

PVS-Studio corporate blog.NET * C# * Visual Studio * Development for Windows *

PVS-Studio is a tool for detecting software bugs and potential vulnerabilities in the source code of software written in C, C++, C#, and Java. The analyzer runs on Windows, Linux, and macOS.

+15

vkhanieva Jul 11 2019 at 13:52

PVS-Studio wanted but couldn't find bugs in robots.txt

3 min

2.2K

PVS-Studio corporate blog

The other day Google revealed the sources of the robots.txt parser. Why not give a run for the already far and wide checked project using PVS-Studio and possibly find a bug. So said so done. But I wish we could find something meaningful. Well, then let it be just a reason to give full marks for Google developers.

robots.txt — is an index file that contains rules for search robots. It works for https, http and FTP protocols. Google made the parser of the robots.txt file available for everyone. Read more about this news here: Google opens the source code of the robots.txt parser

+15

OAndreev Jun 28 2019 at 11:40

PVS-Studio in the Clouds — Running the Analysis on Travis CI

10 min

794

PVS-Studio corporate blogDevOps * C *

At the moment, cloud CI systems are a highly-demanded service. In this article, we'll tell you how to integrate analysis of source code into a CI cloud platform with the tools that are already available in PVS-Studio. As an example we'll use the Travis CI service.

+15

cerg2010cerg2010 Jun 28 2019 at 11:37

PVS-Studio for Visual Studio

10 min

1.2K

PVS-Studio corporate blogC# * C++ * Visual Studio * Development for Windows *

Many of our articles are focused on anything, but not the PVS-Studio tool itself. Whereas we do a lot to make its usage convenient for developers. Nevertheless, our efforts are often concealed behind the scenes. I decided to remedy this situation and tell you about the PVS-Studio plugin for Visual Studio. If you use Visual Studio, this article is for you.

+15

SvyatoslavMC Sep 4 2019 at 13:48

PVS-Studio 7.04

8 min

939

PVS-Studio corporate blogDevOps * C++ * C *

Summer is not only a holiday season, but also time of fruitful work. Sunny days are so inspiring that there's enough energy both for late walks and large code commits. The second summer PVS-Studio 7.04 release turned out to be quite large, so we suggest for your attention this press release, in which we'll tell you about everything.

+14

stefanbuzz Aug 15 2019 at 07:06

PVS-Studio Visits Apache Hive

12 min

1.2K

PVS-Studio corporate blogBig Data * Java * Open source * Information Security *

For the past ten years, the open-source movement has been one of the key drivers of the IT industry's development, and its crucial component. The role of open-source projects is becoming more and more prominent not only in terms of quantity but also in terms of quality, which changes the very concept of how they are positioned on the IT market in general. Our courageous PVS-Studio team is not sitting idly and is taking an active part in strengthening the presence of open-source software by finding hidden bugs in the enormous depths of codebases and offering free license options to the authors of such projects. This article is just another piece of that activity! Today we are going to talk about Apache Hive. I've got the report — and there are things worth looking at.

+14

Paull Jun 7 2019 at 09:31

Nullable Reference types in C# 8.0 and static analysis

12 min

3.7K

PVS-Studio corporate blog.NET * C# * Visual Studio * Development for Windows *

It's not a secret that Microsoft has been working on the 8-th version of C# language for quite a while. The new language version (C# 8.0) is already available in the recent release of Visual Studio 2019, but it's still in beta. This new version is going to have a few features implemented in a somewhat non-obvious, or rather unexpected, way. Nullable Reference types are one of them. This feature is announced as a means to fight Null Reference Exceptions (NRE).

+14

GGribkov Aug 21 2019 at 13:25

An Easy Way to Make Money on Bug Bounty

5 min

5.3K

PVS-Studio corporate blogOpen source * Information Security * Lifehacks for geeksProgramming *

Рисунок 2

Surely you've heard the expression «bug hunting» many times. I dare to assume, you won't mind earning one or two hundred (or even thousand) dollars by finding a potential vulnerability in someone's program. In this article, I'll tell you about a trick that will help analyzing open source projects in order to find such vulnerabilities.

+13

SvyatoslavMC Mar 14 2019 at 06:02

Following in the Footsteps of Calculators: Qalculate

7 min

1.5K

PVS-Studio corporate blogProgramming * Open source * C++ * C *

Previously we did code reviews of large mathematical packages, for example, Scilab and Octave, whereby calculators remained aloof as small utilities, in which it is difficult to make errors due to their small codebase. We were wrong that we haven't paid attention to them. The case with posting the source code of the Windows calculator showed that actually everyone was interested in discussing types of errors hiding in it. Moreover, the number of errors there was more than enough to write an article about that. My colleagues and I, we decided to explore the code of a number of popular calculators, and it turned out that the code of the Windows calculator was not that bad (spoiler).

+13

nookino Jul 12 2021 at 12:43

An Unexpected Article About Our Unicorn: Who Is the PVS-Studio Mascot?

5 min

2.1K

PVS-Studio corporate blogDesignGraphic design * Branding

PVS-Studio has a mascot that became inseparable from the brand - a unicorn. Lately we've been getting many questions about our magic steed: why the unicorn, why has he changed so much, does he have hooves, how come he doesn't wear pants, and how do we draw him. The answers are finally here, in this very article.

Attention: there will be a lot of pictures. And I mean A LOT.

+11

SvyatoslavMC Jun 26 2019 at 08:54

The dangers of using multi-character constants

2 min

1.4K

PVS-Studio corporate blogC++ * Visual Studio * Development for Windows *

During code analysis, PVS-Studio analyzes the data flow and operates variable values. Values are taken from constants or derived from conditional expressions. We call them virtual values. Recently, we have refined them in order to work with multi-character constants and this has become the reason to create a new diagnostic rule.

Introduction

Multi-character-literals are implementation-defined, so different compilers can encode them in different ways. For example, GCC and Clang set a value, based on the order of the symbols in the literal, while MSVC moves them depending on the symbol's type (regular or escape).

+11

SvyatoslavMC Jul 26 2019 at 16:35

Best Copy-Paste Algorithms for C and C++. Haiku OS Cookbook

14 min

1.1K

PVS-Studio corporate blogC * C++ * Open source *

Numerous typos and Copy-Paste code became the main topic of the additional article about checking the Haiku code by the PVS-Studio analyzer. Yet this article mostly tells about errors related to thoughtlessness and failed refactoring, rather than to typos. The errors found demonstrate how strong the human factor is in software development.

+10

HobbitSam Dec 23 2019 at 09:21

Our Small Contribution to Avalonia UI's Fight for Fewer Platforms

11 min

PVS-Studio corporate blogOpen source * C# * .NET *

This article is a review of the bugs found in the Avalonia UI project with the static analyzer PVS-Studio. Avalonia UI is an open-source cross-platform XAML-based UI framework. This is one of the most technologically significant projects in the history of .NET as it enables developers to create cross-platform interfaces based on the WPF system. We hope the project's authors will find this article helpful in fixing some of the bugs, and convincing enough to make static analysis part of their development process.

Stolyarrr Feb 24 2021 at 07:31

Free Heroes of Might and Magic II: Open-Source Project that You Want to Be Part of

8 min

3.9K

PVS-Studio corporate blogOpen source * C++ * Game development *

Recently we found out that the new version of the fheroes2 project was released. In our company there are many fans of Heroes of Might and Magic game series. So, we couldn't pass it up and checked the project by PVS-Studio.

Andrey2008 Aug 16 2021 at 08:15

PVS-Studio 7.14: intermodular analysis in C++ and plugin for JetBrains CLion

4 min

791

PVS-Studio corporate blog

0854_Release_714/image2.png

The PVS-Studio team is increasing the number of diagnostics with each new release. Besides, we are improving the analyzer's infrastructure. This time we added the plugin for JetBrains CLion. Moreover, we introduced intermodular analysis of C++ projects and speeded up the C# analyzer core.

IchNikola Jun 21 2021 at 09:56

How WCF Shoots Itself in the Foot With TraceSource

11 min

1.1K

PVS-Studio corporate blogDevelopment for Windows * C# * .NET *

We don't often get the chance to write something on parallel programming issues. This time we "got lucky". The TraceEvent standard method has some implementation peculiarities. They resulted in an error with multiple threads blocking. So we'd like to warn users about this nuance and cover this interesting case from our users support practice. Why was our support involved? Keep reading to find out. Enjoy the reading!

vkhanieva Apr 10 2020 at 07:19

DeepCode: Outside Perspective

7 min

793

PVS-Studio corporate blogC++ * Machine learning *

Recently DeepCode, which is a static analyzer based on machine learning, began to support checking of C and C++ projects. And now we can find out the differences between the results of the classic and the machine-learning static analysis.

1 2 3

5 6 7 8 9