Cppcheck的软件缺陷模式分析与定位  

Software defect pattern analysis and location based on Cppcheck

作　　者：张仕金[1] 尚赵伟[1] 

机构地区：[1]重庆大学计算机学院,重庆400030

出　　处：《计算机工程与应用》2015年第3期69-73,共5页Computer Engineering and Applications

基　　金：国家自然科学重点基金(No.91118005);国家自然科学基金(No.61173130);重庆市自然科学基金(CSTC-2010BB2217)

摘　　要：能通过编译的C/C++程序代码可能依然隐含安全、设计或风格上缺陷,从而导致运行时出现内存泄露、运行异常等现象,难以完成软件需求所预期的目标。针对开源软件缺陷检测工具Cppcheck软件存在的不足,主要分析了Cppcheck架构、缺陷模式表示与实现,在对已收集350个缺陷模式分析总结基础上,对其完善,提高缺陷检测能力。通过两组实验验证改进Cppcheck工作的有效性。The C/C ＋＋ program which is compiled well does not always guarantee that there are no defects in the code.There may still contain defects relativing to securities, design and code style, therefore it may result in memory leak or misuse of pointers so that it is difficult to accomplish the expected goal of software requirements. Aiming to software defection tool of Cppcheck＇s insufficiency for open software defect, this paper mainly analyses the Cppcheck architecture, defect pattern representation and implementation, as well as on the basis of summarizing 350 defect patterns to improve Cppcheck.It makes two relevant experiments to verify the effectiveness of improved Cppcheck.

关 键 词：软件缺陷 缺陷模式 Cppcheck 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]