Revolution Automated

Enabling High - Quality C/C++ Software, Automatically-Coverity Prevent

May 13, 2008 at 5:20 am · Filed under Computer and Internet

Coverity Prevent SQS ™ is a leader in the market for automatic identification and correction of deficiencies, the reviewers in C, C + + and Java source code. By providing a comprehensive picture of your environment to build, is the source code, and the process of development, prevent, the SQS-standard for the high quality of the software in all organizations throughout the world.

Prevention of SQS for C / C + + analysis automatically important and complex C and C + + recognize the fundamentals and the criticism must alleviate the deficiencies lead to accidents system, corruption of memory vulnerabilities to a cause unpredictable behavior, and the deterioration the performance.

Prevention of SQS features:

• 100% coverage path: the prevention of the SQS for C / C + + 100% analysis of the distance of your source code to ensure that all parts of the execution be met without any motion not hold the execution Faster.

• Low rate of false positives: the prevention of the SQS for C / C + + remains a very low rate of false-positive and ensures that the developers time to take control of the results of significant deficiencies in improving the quality.

• Very expandable: prevention of the SQS for C / C + + analysis of millions of lines of code in a few hours, easy to integrate into your future with little or no additional hardware and without interruption of your process of development.

That makes a big?

Unlike other C / C + + analysis tools, based on the style of programming and syntax on the basis of controls, preventing the SQS for C / C + +, deep, interprocedural analysis to discover the criticism, the Reduce the main shortcomings for the developers. Prevention of SQS for C / C + + multiple scan engines to discover, difficult to find defects, in particular:

• way cash engine includes control over the streaming function of your respective programme code, which prevent the SQS analyze, to 100% of paths through your code.

• Motor Title statistical models for the conduct throughout the database code, which prevent the SQS behavior derived based on the behavior observed before.

• Contents Interprocedural engine to prevent SQS allows a number of programmes for the analysis of complex programs on any files in the depth and modules in a form which is similar to the possible implementation of the binary. This result is the largest loyalty of the results available.

• wrong path motor industry solves any condition to determine whether it is true, false, or the unknown path. This prevents effectively discouraged the SQS false positive all the obvious deficiencies.

A sample of the criticism of the shortcomings of the SQS prevention for C / C + + includes:

Concurrency issues

• Double Lock, no locks.

• locks acquis in the wrong order.

• palaces owned by functionality.

Memory and corruption
The bad management

• leakage of resources.

• Call Features release, the use of false arguments.

• Excessive stack used in systems with limited memory.

Crash causes the pointer error

• pointer dereference zero.

• The fact that you are not in the value of zero.

• misuse of the data in the data types of packaging.

C + +-specific error

• Diverting STL iterators.

• The fact that we no memory request by destructive.

• Poor except the virtual functions.

• Uncaught exception.

Window / com error

• the improper memory allocation with the COM interfaces.

• conversion of the wrong type.

Vulnerabilities

• buffer overflows.

• SQL injection.

• cross-site scripting.

• integer overflows.Read more information by clicking the links below:

Permalink

Enabling High - Quality C/C++ Software, Automatically-Coverity Prevent

Leave a Comment

Helpful Links

Revo Tech

Categories

Recent Posts

Blogroll

Educational Links