Static analyzer Svace for finding of defects in program source code

This paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scala...

Full description

Bibliographic Details
Main Authors: V. P. Ivannikov, A. A. Belevantsev, A. E. Borodin, V. N. Ignatiev, D. M. Zhurikhin, A. I. Avetisyan, M. I. Leonov
Format: Article
Language:English
Published: Ivannikov Institute for System Programming of the Russian Academy of Sciences 2018-10-01
Series:Труды Института системного программирования РАН
Subjects:
Online Access:https://ispranproceedings.elpub.ru/jour/article/view/774
_version_ 1818749794683715584
author V. P. Ivannikov
A. A. Belevantsev
A. E. Borodin
V. N. Ignatiev
D. M. Zhurikhin
A. I. Avetisyan
M. I. Leonov
author_facet V. P. Ivannikov
A. A. Belevantsev
A. E. Borodin
V. N. Ignatiev
D. M. Zhurikhin
A. I. Avetisyan
M. I. Leonov
author_sort V. P. Ivannikov
collection DOAJ
description This paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scalability up to programs of millions lines of code and acceptable quality of analysis (30-80% of true positive warnings).
first_indexed 2024-12-18T04:09:27Z
format Article
id doaj.art-3a598609c4dc49a7a88bc78698287dd3
institution Directory Open Access Journal
issn 2079-8156
2220-6426
language English
last_indexed 2024-12-18T04:09:27Z
publishDate 2018-10-01
publisher Ivannikov Institute for System Programming of the Russian Academy of Sciences
record_format Article
series Труды Института системного программирования РАН
spelling doaj.art-3a598609c4dc49a7a88bc78698287dd32022-12-21T21:21:31ZengIvannikov Institute for System Programming of the Russian Academy of SciencesТруды Института системного программирования РАН2079-81562220-64262018-10-0126123125010.15514/ISPRAS-2014-26(1)-7774Static analyzer Svace for finding of defects in program source codeV. P. Ivannikov0A. A. Belevantsev1A. E. Borodin2V. N. Ignatiev3D. M. Zhurikhin4A. I. Avetisyan5M. I. Leonov6ИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНИСП РАНThis paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages. Main features of the tool are simplicity of usage, wide variety of supported warning types, scalability up to programs of millions lines of code and acceptable quality of analysis (30-80% of true positive warnings).https://ispranproceedings.elpub.ru/jour/article/view/774статический анализанализ потока данныхуязвимостимежпроцедурный анализанализ на основе аннотаций
spellingShingle V. P. Ivannikov
A. A. Belevantsev
A. E. Borodin
V. N. Ignatiev
D. M. Zhurikhin
A. I. Avetisyan
M. I. Leonov
Static analyzer Svace for finding of defects in program source code
Труды Института системного программирования РАН
статический анализ
анализ потока данных
уязвимости
межпроцедурный анализ
анализ на основе аннотаций
title Static analyzer Svace for finding of defects in program source code
title_full Static analyzer Svace for finding of defects in program source code
title_fullStr Static analyzer Svace for finding of defects in program source code
title_full_unstemmed Static analyzer Svace for finding of defects in program source code
title_short Static analyzer Svace for finding of defects in program source code
title_sort static analyzer svace for finding of defects in program source code
topic статический анализ
анализ потока данных
уязвимости
межпроцедурный анализ
анализ на основе аннотаций
url https://ispranproceedings.elpub.ru/jour/article/view/774
work_keys_str_mv AT vpivannikov staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT aabelevantsev staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT aeborodin staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT vnignatiev staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT dmzhurikhin staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT aiavetisyan staticanalyzersvaceforfindingofdefectsinprogramsourcecode
AT mileonov staticanalyzersvaceforfindingofdefectsinprogramsourcecode