C++代码缺陷自动检测工具的研究与实现  

Research and implementation of automated C++ code defect detection tool

作　　者：古可[1] 刘超[1] 金茂忠[1] 

机构地区：[1]北京航空航天大学软件工程研究所,北京100191

出　　处：《计算机应用研究》2009年第5期1628-1631,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2006AA01Z176);国家"十一五"国防预研项目

摘　　要：通过编译的C++程序代码并不一定保证代码中不存在缺陷。代码中可能依然隐含了安全、设计或是风格上的缺陷,从而导致程序运行时出现内存泄露、指针误用等现象,或导致程序代码不清晰、可读性差。为了有效查找这些缺陷,探讨了可定制缺陷规则的C++代码缺陷自动检测技术,介绍了两种缺陷定位方法,给出了一种基于XPath技术的缺陷规则定制方法,设计并实现了一种代码缺陷自动检测工具CDD(C++defect detec-tor),并通过实验证明了缺陷定位方法的有效性以及CDD的易用性。The C ＋ ＋ program which is all right in compiling process does not always insure there are no defects in the code. For the reason that there may be defects relative to securities, design and code style, it may result in memory leak, misuse of pointers or make the program code unclearly and unreadable. The defects will place bad impact on the normal running and the maintain ability of the software. This paper introduced a good technology of defect-extendable automated C ＋ ＋ code defect detection, including two methods to detect the defects, a description of defect rules based on XPath technology and an introduction of the C ＋ ＋ defect automation detector. Furthermore, analyzed the detector in stability, credibility and easy-to-use by experiment.

关 键 词：静态分析 抽象语法树 缺陷检测 规则扩展 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]