基于VxWorks平台的软件重量级静态检查  

Software heavy-weight static checking based on VxWorks platform

作　　者：姜文[1] 刘立康[1] 

机构地区：[1]西安电子科技大学通信工程学院,陕西西安710071

出　　处：《微型机与应用》2016年第6期79-81,84,共4页Microcomputer & Its Applications

摘　　要：为了保证基于VxWorks平台的软件代码的质量,对软件源代码进行静态检查非常重要。以ClearCase作为配置管理工具,将重量级静态检查工具Coverity和Fortify集成到持续集成工具ICP-CI上,对软件源代码进行静态检查。详细叙述了Coverity和Fortify编译器的配置,以及在ICP-CI工具的任务管理页面上配置检查任务。分析了检查过程中出现各种问题的原因并给出相应的解决方案。最后介绍了一个典型案例。工作实践表明,静态检查有助于及时发现并解决软件源代码的各种缺陷,从而提高软件质量和安全性。In order to guarantee the quality of code based on Vx Works platform,the static checking to code is very important. With ClearCase as configuration management tool,it integrated the heavy-weight static checking tools Coverity and Fortify into continuous integration tool ICPCI for static checking. It described in detail the compiler configuration for Coverity and Fortify and the ICP-CI task management configuration tasks on page. It analyzed the cause of the problems appeared in the process of checking and gave the corresponding solutions. Finally a typical case is introduced. Practice shows that the static check help to timely discover and solve all kinds of flaws of the software source code,to improve software quality and safety.

关 键 词：嵌入式操作系统 静态检查 持续集成 安全漏洞 

分 类 号：TP311.56[自动化与计算机技术—计算机软件与理论]