Top "Static-analysis" questions

"Static Analysis" refers to the software tools (or their use) to analyze application code for arbitrary properties, such as errors (uninitialized variables, possible SQL injection-attack, is this code-dead, can an argument be null,...) or structure (what is the call graph for this code?

What code analysis tools do you use for your Java projects?

What code analysis tools do you use on your Java projects? I am interested in all kinds static code analysis …

java code-coverage static-analysis
How can I analyze Python code to identify problematic areas?

I have a large source repository split across multiple projects. I would like to produce a report about the health …

python static-analysis cyclomatic-complexity
Import order coding standard

PEP8 suggests that: Imports should be grouped in the following order: standard library imports related third party imports local application/…

python python-import static-analysis pep8
Dead code detection in legacy C/C++ project

How would you go about dead code detection in C/C++ code? I have a pretty large code base to …

c++ automation static-analysis legacy-code dead-code
@GuardedBy annotation with java.util.concurrent.locks.ReadWriteLock

What is a proper/preferred way to annotate fields that are protected with a ReadWriteLock so that tools like FindBugs …

java concurrency annotations static-analysis findbugs
Tool to generate graph data for class dependencies

Is there some tool that is able to analyze Java source files, construct a graph from it and provide the …

java dependencies static-analysis
PyLint Best Practices?

pyLint looks like a good tool for running analysis of python code. However, our main objective is to catch any …

python static-analysis pylint
Disable Sonar duplications on Entity, DTO packages

Is there any way to disable certain metrics from selected packages in Sonar? I use Sonar to analyze my project …

java static-analysis sonarqube
How to output the AST built using ANTLR?

I'm making a static analyzer for C. I have done the lexer and parser using ANTLR in which generates Java …

c antlr static-analysis abstract-syntax-tree
How to use cppcheck's inline suppression filter option for C++ code?

I would like to use Cppcheck for static code analysis of my C++ code. I learned that I can suppress …

c++ static-analysis error-suppression cppcheck