Top "Static-analysis" questions

"Static Analysis" refers to the software tools (or their use) to analyze application code for arbitrary properties, such as errors (uninitialized variables, possible SQL injection-attack, is this code-dead, can an argument be null,...) or structure (what is the call graph for this code?

Static Code Analyzer for C++ in Linux

Possible Duplicate: What open source C++ static analysis tools are available? Does anybody know of an open source,good static …

c++ linux open-source static-analysis
How to fix the following PMD violations

I am using PMD to analyze code and it produces a few high priority warnings which I do not know …

java code-analysis static-analysis pmd
Are there any static code analysis tools for Delphi/Pascal?

Are there any static code analysis tools for Delphi/Pascal? I have seen plenty of options for C++ and .NET, …

delphi static-analysis pascal
Any Static Code Analysis Tools for Stored Procedures?

Are there any static code analysis tools for stored procedures written particularly in PL/SQL and T-SQL?

database tsql stored-procedures plsql static-analysis
What's the current state of static analysis tools for Scala?

I saw a StackOverflow question regarding static analysis in Scala, but that one was answered in 2009. As you know, the …

scala static-analysis sonarqube scalastyle
Stack Size Estimation

In multi-threaded embedded software (written in C or C++), a thread must be given enough stack space in order to …

c++ c embedded stack static-analysis
How to exclude files from Eclipse indexing (Static Code Analysis)?

I have a makefile project comprised of many source, header and other files, which I am trying to convert to …

eclipse eclipse-cdt static-analysis indexer ds-5
Coverity for Java static analysis

I'd like to get comments from people who have used or evaluated Coverity for statically analysing Java-code. I know it's …

java static-analysis coverity-prevent
Dead code identification (C++)

I have a large legacy C++ project compiled under Visual Studio 2008. I know there is a reasonably amount of 'dead' …

c++ static-analysis dead-code
Is there a tool to validate an Azure DevOps Pipeline locally?

When making changes to YAML-defined Azure DevOps Pipelines, it can be quite tedious to push changes to a branch just …

azure-devops azure-pipelines static-analysis